diff --git a/.github/azure-client-tools-bot/config.yml b/.github/azure-client-tools-bot/config.yml
index 4d7561afac6..f5846b6c3fd 100644
--- a/.github/azure-client-tools-bot/config.yml
+++ b/.github/azure-client-tools-bot/config.yml
@@ -50,7 +50,7 @@ cli_common_issues:
         - https://github.com/Azure/azure-cli/issues/19640#issuecomment-1133875268
         - https://github.com/Azure/azure-cli/issues/19640#issuecomment-1148202854
 
-        Please follow  https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-linux to install Microsoft official Azure CLI.
+        Please follow  https://learn.microsoft.com/en-us/cli/azure/install-azure-cli-linux to install Microsoft official Azure CLI.
 
         If you feel that further discussion is needed, please add a comment with the text `/clibot unresolve` to reopen the issue.
     - tag: latest_api_version_not_available
diff --git a/Dockerfile.nanoserver b/Dockerfile.nanoserver
index 442ac8ed942..b7ac434ebf4 100644
--- a/Dockerfile.nanoserver
+++ b/Dockerfile.nanoserver
@@ -11,8 +11,8 @@ LABEL maintainer="Microsoft" \
       org.label-schema.version=$CLI_VERSION \
       org.label-schema.license="MIT" \
       org.label-schema.description="The Azure CLI 2.0 is the new Azure CLI and is applicable when you use the Resource Manager deployment model." \
-      org.label-schema.url="https://docs.microsoft.com/cli/azure/overview" \
-      org.label-schema.usage="https://docs.microsoft.com/cli/azure/install-az-cli2#docker" \
+      org.label-schema.url="https://learn.microsoft.com/cli/azure/overview" \
+      org.label-schema.usage="https://learn.microsoft.com/cli/azure/install-az-cli2#docker" \
       org.label-schema.build-date=$BUILD_DATE \
       org.label-schema.vcs-url="https://github.com/Azure/azure-cli.git" \
       org.label-schema.docker.cmd="docker run -v $HOME\.azure:C:\Users\ContainerUser\.azure -it mcr.microsoft.com/azure-cli:$CLI_VERSION"
diff --git a/README.md b/README.md
index 76242adbc6a..6c6c143f90c 100644
--- a/README.md
+++ b/README.md
@@ -10,7 +10,7 @@ Take a test run now from [Azure Cloud Shell](https://portal.azure.com/#cloudshel
 
 ## Installation
 
-Please refer to the [install guide](https://docs.microsoft.com/cli/azure/install-azure-cli) for detailed install instructions.
+Please refer to the [install guide](https://learn.microsoft.com/cli/azure/install-azure-cli) for detailed install instructions.
 
 A list of common install issues and their resolutions are available at [install troubleshooting](https://github.com/Azure/azure-cli/blob/dev/doc/install_troubleshooting.md).
 
@@ -28,7 +28,7 @@ $ az [ group ] [ subgroup ] [ command ] {parameters}
 
 ### Get Started
 
-Please refer to the ["get started" guide](https://docs.microsoft.com/cli/azure/get-started-with-az-cli2) for in-depth instructions.
+Please refer to the ["get started" guide](https://learn.microsoft.com/cli/azure/get-started-with-az-cli2) for in-depth instructions.
 
 For usage and help content, pass in the `-h` parameter, for example:
 
@@ -87,21 +87,21 @@ For scripting purposes, we output certain exit codes for differing scenarios.
 
 ### Common scenarios and use Azure CLI effectively
 
-Please check [Tips for using Azure CLI effectively](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively). It describes some common scenarios:
+Please check [Tips for using Azure CLI effectively](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively). It describes some common scenarios:
 
-- [Output formatting (json, table, or tsv)](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#output-formatting-json-table-or-tsv)
-- [Pass values from one command to another](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#pass-values-from-one-command-to-another)
-- [Async operations](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#async-operations)
-- [Generic update arguments](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#generic-update-arguments)
-- [Generic resource commands - `az resource`](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#generic-resource-commands---az-resource)
-- [REST API command - `az rest`](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#rest-api-command---az-rest)
-- [Quoting issues](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#quoting-issues)
-- [Work behind a proxy](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#work-behind-a-proxy)
-- [Concurrent builds](https://docs.microsoft.com/en-us/cli/azure/use-cli-effectively#concurrent-builds)
+- [Output formatting (json, table, or tsv)](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#output-formatting-json-table-or-tsv)
+- [Pass values from one command to another](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#pass-values-from-one-command-to-another)
+- [Async operations](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#async-operations)
+- [Generic update arguments](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#generic-update-arguments)
+- [Generic resource commands - `az resource`](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#generic-resource-commands---az-resource)
+- [REST API command - `az rest`](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#rest-api-command---az-rest)
+- [Quoting issues](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#quoting-issues)
+- [Work behind a proxy](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#work-behind-a-proxy)
+- [Concurrent builds](https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively#concurrent-builds)
 
 ### More samples and snippets
 
-For more usage examples, take a look at our [GitHub samples repo](http://github.com/Azure/azure-cli-samples) or [https://docs.microsoft.com/cli/azure/overview](https://docs.microsoft.com/cli/azure/overview).
+For more usage examples, take a look at our [GitHub samples repo](http://github.com/Azure/azure-cli-samples) or [https://learn.microsoft.com/cli/azure/overview](https://learn.microsoft.com/cli/azure/overview).
 
 ### Write and run commands in Visual Studio Code
 
diff --git a/build_scripts/windows/Product.wxs b/build_scripts/windows/Product.wxs
index 2db951f4a06..1d14b411d78 100644
--- a/build_scripts/windows/Product.wxs
+++ b/build_scripts/windows/Product.wxs
@@ -68,9 +68,9 @@
     <Icon Id="AzureIcon" SourceFile="$(var.ProductResources)windowsazure.ico" />
 
     <Property Id="ARPPRODUCTICON" Value="AzureIcon" />
-    <Property Id="ARPHELPLINK" Value="https://docs.microsoft.com/cli/azure" />
-    <Property Id="ARPURLINFOABOUT" Value="https://docs.microsoft.com/cli/azure/overview" />
-    <Property Id="ARPURLUPDATEINFO" Value="https://docs.microsoft.com/cli/azure/overview" />
+    <Property Id="ARPHELPLINK" Value="https://learn.microsoft.com/cli/azure" />
+    <Property Id="ARPURLINFOABOUT" Value="https://learn.microsoft.com/cli/azure/overview" />
+    <Property Id="ARPURLUPDATEINFO" Value="https://learn.microsoft.com/cli/azure/overview" />
     <Property Id="MSIFASTINSTALL" Value="7" />
     <Property Id="ApplicationFolderName" Value="Microsoft SDKs\Azure" />
     <Property Id="WixAppFolder" Value="WixPerMachineFolder" />
diff --git a/doc/authoring_command_modules/README.md b/doc/authoring_command_modules/README.md
index d26365fc47a..aace2141b84 100644
--- a/doc/authoring_command_modules/README.md
+++ b/doc/authoring_command_modules/README.md
@@ -15,7 +15,7 @@ The document provides instructions and guidelines on how to author command modul
 
 **Test Authoring**:<br>https://github.com/Azure/azure-cli/blob/dev/doc/authoring_tests.md
 
-**Generating Documentation**:<br>https://review.docs.microsoft.com/help/onboard/admin/reference/cli/azure-cli-ci?branch=master#documenting-a-new-azure-cli-module
+**Generating Documentation**:<br>https://review.learn.microsoft.com/help/onboard/admin/reference/cli/azure-cli-ci?branch=master#documenting-a-new-azure-cli-module
 
 <a name="heading_set_up"></a>Set Up
 ------
diff --git a/scripts/ci/codegen_report.py b/scripts/ci/codegen_report.py
index 27bd11a501e..12eb2273944 100644
--- a/scripts/ci/codegen_report.py
+++ b/scripts/ci/codegen_report.py
@@ -34,7 +34,7 @@
 KUSTO_CLUSTER = os.environ.get('KUSTO_CLUSTER')
 KUSTO_DATABASE = os.environ.get('KUSTO_DATABASE')
 KUSTO_TABLE = os.environ.get('KUSTO_TABLE')
-# get tenant id from https://docs.microsoft.com/en-us/onedrive/find-your-office-365-tenant-id
+# get tenant id from https://learn.microsoft.com/en-us/onedrive/find-your-office-365-tenant-id
 KUSTO_TENANT_ID = os.environ.get('KUSTO_TENANT_ID')
 
 
diff --git a/scripts/live_test/sendemail.py b/scripts/live_test/sendemail.py
index 8a811cba491..1fbf06b9df6 100644
--- a/scripts/live_test/sendemail.py
+++ b/scripts/live_test/sendemail.py
@@ -42,7 +42,7 @@
 KUSTO_CLUSTER = os.environ.get('KUSTO_CLUSTER')
 KUSTO_DATABASE = os.environ.get('KUSTO_DATABASE')
 KUSTO_TABLE = os.environ.get('KUSTO_TABLE')
-# get tenant id from https://docs.microsoft.com/en-us/onedrive/find-your-office-365-tenant-id
+# get tenant id from https://learn.microsoft.com/en-us/onedrive/find-your-office-365-tenant-id
 KUSTO_TENANT_ID = os.environ.get('KUSTO_TENANT_ID')
 PYTHON_VERSION = os.environ.get('PYTHON_VERSION')
 USER_BRANCH = os.environ.get('USER_BRANCH')
diff --git a/scripts/release/homebrew/docker/formula_template.txt b/scripts/release/homebrew/docker/formula_template.txt
index 79de7b969c2..c8bbff14aeb 100644
--- a/scripts/release/homebrew/docker/formula_template.txt
+++ b/scripts/release/homebrew/docker/formula_template.txt
@@ -2,7 +2,7 @@ class AzureCli < Formula
   include Language::Python::Virtualenv
 
   desc "Microsoft Azure CLI 2.0"
-  homepage "https://docs.microsoft.com/cli/azure/overview"
+  homepage "https://learn.microsoft.com/cli/azure/overview"
   url "{{ upstream_url }}"
   version "{{ cli_version }}"
   sha256 "{{ upstream_sha }}"
diff --git a/scripts/release/rpm/azure-cli.spec b/scripts/release/rpm/azure-cli.spec
index e63f58f7be6..d8e6b610884 100644
--- a/scripts/release/rpm/azure-cli.spec
+++ b/scripts/release/rpm/azure-cli.spec
@@ -21,7 +21,7 @@ License:        MIT
 Name:           %{name}
 Version:        %{version}
 Release:        %{release}
-Url:            https://docs.microsoft.com/cli/azure/install-azure-cli
+Url:            https://learn.microsoft.com/cli/azure/install-azure-cli
 Requires:       %{python_package}
 Prefix:         /usr
 Prefix:         /etc
diff --git a/src/azure-cli-core/azure/cli/core/auth/credential_adaptor.py b/src/azure-cli-core/azure/cli/core/auth/credential_adaptor.py
index dc97b48e6b2..9cd15ba2ff2 100644
--- a/src/azure-cli-core/azure/cli/core/auth/credential_adaptor.py
+++ b/src/azure-cli-core/azure/cli/core/auth/credential_adaptor.py
@@ -23,7 +23,7 @@ def __init__(self, credential, resource=None, auxiliary_credentials=None):
         :param resource: AAD resource for Track 1 only
         :param auxiliary_credentials: Credentials from .msal_authentication for cross tenant authentication.
             Details about cross tenant authentication:
-            https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/authenticate-multi-tenant
+            https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/authenticate-multi-tenant
         """
 
         self._credential = credential
diff --git a/src/azure-cli-core/azure/cli/core/auth/landing_pages/success.html b/src/azure-cli-core/azure/cli/core/auth/landing_pages/success.html
index d24f2fea071..a4eb5069a79 100644
--- a/src/azure-cli-core/azure/cli/core/auth/landing_pages/success.html
+++ b/src/azure-cli-core/azure/cli/core/auth/landing_pages/success.html
@@ -2,7 +2,7 @@
 <html>
 <head>
     <meta charset="utf-8" />
-    <meta http-equiv="refresh" content="60;url=https://docs.microsoft.com/cli/azure/">
+    <meta http-equiv="refresh" content="60;url=https://learn.microsoft.com/cli/azure/">
     <title>Login successfully</title>
     <style>
         body {
@@ -20,6 +20,6 @@
 </head>
 <body>
     <h3>You have logged into Microsoft Azure!</h3>
-    <p>You can close this window, or we will redirect you to the <a href="https://docs.microsoft.com/cli/azure/">Azure CLI documentation</a> in 1 minute.</p>
+    <p>You can close this window, or we will redirect you to the <a href="https://learn.microsoft.com/cli/azure/">Azure CLI documentation</a> in 1 minute.</p>
 </body>
 </html>
diff --git a/src/azure-cli-core/azure/cli/core/auth/util.py b/src/azure-cli-core/azure/cli/core/auth/util.py
index 61e91b27ca1..54969ceca54 100644
--- a/src/azure-cli-core/azure/cli/core/auth/util.py
+++ b/src/azure-cli-core/azure/cli/core/auth/util.py
@@ -17,7 +17,7 @@
 def aad_error_handler(error, **kwargs):
     """ Handle the error from AAD server returned by ADAL or MSAL. """
 
-    # https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes
+    # https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes
     # Search for an error code at https://login.microsoftonline.com/error
 
     # To trigger this function for testing, simply provide an invalid scope:
@@ -67,7 +67,7 @@ def resource_to_scopes(resource):
     :param resource: The ADAL resource ID
     :return: A list of scopes
     """
-    # https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#trailing-slash-and-default
+    # https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#trailing-slash-and-default
     # We should not trim the trailing slash, like in https://management.azure.com/
     # In other word, the trailing slash should be preserved and scope should be https://management.azure.com//.default
     scope = resource + '/.default'
diff --git a/src/azure-cli-core/azure/cli/core/commands/client_factory.py b/src/azure-cli-core/azure/cli/core/commands/client_factory.py
index b0c17978758..1833a70ec12 100644
--- a/src/azure-cli-core/azure/cli/core/commands/client_factory.py
+++ b/src/azure-cli-core/azure/cli/core/commands/client_factory.py
@@ -196,7 +196,7 @@ def _prepare_mgmt_client_kwargs_track2(cli_ctx, cred):
     # Track 2 currently lacks the ability to take external credentials.
     #   https://github.com/Azure/azure-sdk-for-python/issues/8313
     # As a temporary workaround, manually add external tokens to 'x-ms-authorization-auxiliary' header.
-    #   https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/authenticate-multi-tenant
+    #   https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/authenticate-multi-tenant
     if hasattr(cred, "get_auxiliary_tokens"):
         aux_tokens = cred.get_auxiliary_tokens(*scopes)
         if aux_tokens:
diff --git a/src/azure-cli-core/azure/cli/core/intercept_survey.py b/src/azure-cli-core/azure/cli/core/intercept_survey.py
index b716744725c..5a9d8ac03e0 100644
--- a/src/azure-cli-core/azure/cli/core/intercept_survey.py
+++ b/src/azure-cli-core/azure/cli/core/intercept_survey.py
@@ -21,11 +21,11 @@
 PROMPT_INTERVAL_IN_DAYS = 180
 
 # VT code for text formatting:
-# https://docs.microsoft.com/en-us/windows/console/console-virtual-terminal-sequences#extended-colors
+# https://learn.microsoft.com/en-us/windows/console/console-virtual-terminal-sequences#extended-colors
 SURVEY_STYLE = '\x1b[0;38;2;255;255;255;48;2;0;120;212m'  # Default & Foreground #FFFFFF & Background #0078D4
 
 # VT code for text modification:
-# https://docs.microsoft.com/en-us/windows/console/console-virtual-terminal-sequences#text-modification
+# https://learn.microsoft.com/en-us/windows/console/console-virtual-terminal-sequences#text-modification
 NEW_LINE = '\x1b[1L'
 ERASE_IN_LINE = '\x1b[0K'
 
diff --git a/src/azure-cli-core/azure/cli/core/parser.py b/src/azure-cli-core/azure/cli/core/parser.py
index 4985a39cf45..6199bb97e8b 100644
--- a/src/azure-cli-core/azure/cli/core/parser.py
+++ b/src/azure-cli-core/azure/cli/core/parser.py
@@ -30,7 +30,7 @@
 EXTENSION_REFERENCE = ("If the command is from an extension, "
                        "please make sure the corresponding extension is installed. "
                        "To learn more about extensions, please visit "
-                       "'https://docs.microsoft.com/cli/azure/azure-cli-extensions-overview'")
+                       "'https://learn.microsoft.com/cli/azure/azure-cli-extensions-overview'")
 
 OVERVIEW_REFERENCE = ("https://aka.ms/cli_ref")
 
diff --git a/src/azure-cli-core/azure/cli/core/style.py b/src/azure-cli-core/azure/cli/core/style.py
index 94d5120d47f..46e17336fbb 100644
--- a/src/azure-cli-core/azure/cli/core/style.py
+++ b/src/azure-cli-core/azure/cli/core/style.py
@@ -12,7 +12,7 @@
 https://devdivdesignguide.azurewebsites.net/command-line-interface/color-guidelines-for-command-line-interface/
 
 Console Virtual Terminal Sequences:
-https://docs.microsoft.com/en-us/windows/console/console-virtual-terminal-sequences#text-formatting
+https://learn.microsoft.com/en-us/windows/console/console-virtual-terminal-sequences#text-formatting
 
 For a complete demo, see `src/azure-cli/azure/cli/command_modules/util/custom.py` and run `az demo style`.
 """
diff --git a/src/azure-cli-core/azure/cli/core/tests/test_help.py b/src/azure-cli-core/azure/cli/core/tests/test_help.py
index 17d8c9587cc..d6c09e67694 100644
--- a/src/azure-cli-core/azure/cli/core/tests/test_help.py
+++ b/src/azure-cli-core/azure/cli/core/tests/test_help.py
@@ -202,7 +202,7 @@ def set_help_yaml(self):
             description: Group yaml description. A.K.A long description
             links:
                 - title: Azure Test Docs
-                  url: "https://docs.microsoft.com/azure/test"
+                  url: "https://learn.microsoft.com/azure/test"
                 - url: "https://aka.ms/just-a-url"
         - command:
             name: test alpha
@@ -210,7 +210,7 @@ def set_help_yaml(self):
             description: Command yaml description. A.K.A long description
             links:
                 - title: Azure Test Alpha Docs
-                  url: "https://docs.microsoft.com/azure/test/alpha"
+                  url: "https://learn.microsoft.com/azure/test/alpha"
                 - url: "https://aka.ms/just-a-long-url"
             arguments:
                 - name: --arg2 # we do not specify the short option in the name.
@@ -251,7 +251,7 @@ def set_help_json(self):
                             "hyper-links": [
                                 {
                                     "title": "Azure Json Test Docs",
-                                    "url": "https://docs.microsoft.com/azure/test"
+                                    "url": "https://learn.microsoft.com/azure/test"
                                 },
                                 {
                                     "url": "https://aka.ms/just-a-url"
@@ -267,7 +267,7 @@ def set_help_json(self):
                             "hyper-links": [
                                 {
                                     "title": "Azure Json Test Alpha Docs",
-                                    "url": "https://docs.microsoft.com/azure/test/alpha"
+                                    "url": "https://learn.microsoft.com/azure/test/alpha"
                                 },
                                 {
                                     "url": "https://aka.ms/just-a-long-url"
@@ -403,7 +403,7 @@ def test_load_from_help_yaml(self, mocked_load, mocked_pkg_util):
         self.assertIsNotNone(group_help_obj)
         self.assertEqual(group_help_obj.short_summary, "Group yaml summary.")
         self.assertEqual(group_help_obj.long_summary, "Group yaml description. A.K.A long description.")
-        self.assertEqual(group_help_obj.links[0], {"title": "Azure Test Docs", "url": "https://docs.microsoft.com/azure/test"})
+        self.assertEqual(group_help_obj.links[0], {"title": "Azure Test Docs", "url": "https://learn.microsoft.com/azure/test"})
         self.assertEqual(group_help_obj.links[1], {"url": "https://aka.ms/just-a-url"})
 
         # Test command help
@@ -411,7 +411,7 @@ def test_load_from_help_yaml(self, mocked_load, mocked_pkg_util):
         self.assertEqual(command_help_obj.short_summary, "Command yaml summary.")
         self.assertEqual(command_help_obj.long_summary, "Command yaml description. A.K.A long description.")
         self.assertEqual(command_help_obj.links[0], {"title": "Azure Test Alpha Docs",
-                                                     "url": "https://docs.microsoft.com/azure/test/alpha"})
+                                                     "url": "https://learn.microsoft.com/azure/test/alpha"})
         self.assertEqual(command_help_obj.links[1], {"url": "https://aka.ms/just-a-long-url"})
 
         # test that parameters and help are loaded from command function docstring, argument registry help and help.yaml
@@ -478,7 +478,7 @@ def test_load_from_help_json(self, mocked_load, mocked_pkg_util, mocked_getmembe
         self.assertEqual(group_help_obj.short_summary, "Group json summary.")
         self.assertEqual(group_help_obj.long_summary, "Group json description. A.K.A long description.")
         self.assertEqual(group_help_obj.links[0], {"title": "Azure Json Test Docs",
-                                                   "url": "https://docs.microsoft.com/azure/test"})
+                                                   "url": "https://learn.microsoft.com/azure/test"})
         self.assertEqual(group_help_obj.links[1], {"url": "https://aka.ms/just-a-url"})
 
         # Test command help
@@ -486,7 +486,7 @@ def test_load_from_help_json(self, mocked_load, mocked_pkg_util, mocked_getmembe
         self.assertEqual(command_help_obj.short_summary, "Command json summary.")
         self.assertEqual(command_help_obj.long_summary, "Command json description. A.K.A long description.")
         self.assertEqual(command_help_obj.links[0], {"title": "Azure Json Test Alpha Docs",
-                                                     "url": "https://docs.microsoft.com/azure/test/alpha"})
+                                                     "url": "https://learn.microsoft.com/azure/test/alpha"})
         self.assertEqual(command_help_obj.links[1], {"url": "https://aka.ms/just-a-long-url"})
 
         # test that parameters and help are loaded from command function docstring, argument registry help and help.yaml
diff --git a/src/azure-cli-core/azure/cli/core/tests/test_util.py b/src/azure-cli-core/azure/cli/core/tests/test_util.py
index 2e5f8ee9f29..ca2ab58af73 100644
--- a/src/azure-cli-core/azure/cli/core/tests/test_util.py
+++ b/src/azure-cli-core/azure/cli/core/tests/test_util.py
@@ -269,8 +269,8 @@ def test_send_raw_requests(self, send_mock, get_raw_token_mock):
         expected_header_with_auth['Authorization'] = 'Bearer eyJ0eXAiOiJKV1'
 
         # Test basic usage
-        # Mock Put Blob https://docs.microsoft.com/en-us/rest/api/storageservices/put-blob
-        # Authenticate with service SAS https://docs.microsoft.com/en-us/rest/api/storageservices/create-service-sas
+        # Mock Put Blob https://learn.microsoft.com/en-us/rest/api/storageservices/put-blob
+        # Authenticate with service SAS https://learn.microsoft.com/en-us/rest/api/storageservices/create-service-sas
         sas_token = ['sv=2019-02-02', '{"srt": "s"}', "{'ss': 'bf'}"]
         send_raw_request(cli_ctx, 'PUT', 'https://myaccount.blob.core.windows.net/mycontainer/myblob?timeout=30',
                          uri_parameters=sas_token, body=test_body,
@@ -312,7 +312,7 @@ def test_send_raw_requests(self, send_mock, get_raw_token_mock):
         self.assertDictEqual(dict(request.headers), expected_header_with_auth)
 
         # Test ARM Subscriptions - List
-        # https://docs.microsoft.com/en-us/rest/api/resources/subscriptions/list
+        # https://learn.microsoft.com/en-us/rest/api/resources/subscriptions/list
         # /subscriptions?api-version=2020-01-01
         send_raw_request(cli_ctx, 'GET', '/subscriptions?api-version=2020-01-01', body=test_body,
                          generated_client_request_id_name=None)
@@ -323,7 +323,7 @@ def test_send_raw_requests(self, send_mock, get_raw_token_mock):
         self.assertDictEqual(dict(request.headers), expected_header_with_auth)
 
         # Test ARM Tenants - List
-        # https://docs.microsoft.com/en-us/rest/api/resources/tenants/list
+        # https://learn.microsoft.com/en-us/rest/api/resources/tenants/list
         # /tenants?api-version=2020-01-01
         send_raw_request(cli_ctx, 'GET', '/tenants?api-version=2020-01-01', body=test_body,
                          generated_client_request_id_name=None)
diff --git a/src/azure-cli-core/azure/cli/core/util.py b/src/azure-cli-core/azure/cli/core/util.py
index b0f9ce9b481..eca3d0bceb5 100644
--- a/src/azure-cli-core/azure/cli/core/util.py
+++ b/src/azure-cli-core/azure/cli/core/util.py
@@ -28,10 +28,10 @@
 SSLERROR_TEMPLATE = ('Certificate verification failed. This typically happens when using Azure CLI behind a proxy '
                      'that intercepts traffic with a self-signed certificate. '
                      # pylint: disable=line-too-long
-                     'Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.')
+                     'Please add this certificate to the trusted CA bundle. More info: https://learn.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.')
 
 QUERY_REFERENCE = ("To learn more about --query, please visit: "
-                   "'https://docs.microsoft.com/cli/azure/query-azure-cli'")
+                   "'https://learn.microsoft.com/cli/azure/query-azure-cli'")
 
 
 _PROXYID_RE = re.compile(
@@ -587,7 +587,7 @@ def shell_safe_json_parse(json_or_dict_string, preserve_order=False, strict=True
             # Recommendation for all shells
             from azure.cli.core.azclierror import InvalidArgumentValueError
             recommendation = "The provided JSON string may have been parsed by the shell. See " \
-                             "https://docs.microsoft.com/cli/azure/use-cli-effectively#use-quotation-marks-in-arguments"
+                             "https://learn.microsoft.com/cli/azure/use-cli-effectively#use-quotation-marks-in-arguments"
 
             # Recommendation especially for PowerShell
             parent_proc = get_parent_proc_name()
@@ -716,7 +716,7 @@ def open_page_in_browser(url):
 
     if is_wsl():   # windows 10 linux subsystem
         try:
-            # https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_powershell_exe
+            # https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_powershell_exe
             # Ampersand (&) should be quoted
             return subprocess.Popen(
                 ['powershell.exe', '-NoProfile', '-Command', 'Start-Process "{}"'.format(url)]).wait()
diff --git a/src/azure-cli-testsdk/azure/cli/testsdk/preparers.py b/src/azure-cli-testsdk/azure/cli/testsdk/preparers.py
index 926923a63eb..5d3cd0004d8 100644
--- a/src/azure-cli-testsdk/azure/cli/testsdk/preparers.py
+++ b/src/azure-cli-testsdk/azure/cli/testsdk/preparers.py
@@ -264,7 +264,7 @@ def create_resource(self, name, **kwargs):
         self.live_only_execute(self.cli_ctx, template.format(name, group, self.location, administrators))
         # After creating MHSM, All data plane commands are disabled until the HSM is activated.
         # To activate the HSM, we must download the Security Domain.
-        # See https://docs.microsoft.com/en-us/azure/key-vault/managed-hsm/quick-create-cli#activate-your-managed-hsm for details
+        # See https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/quick-create-cli#activate-your-managed-hsm for details
         if self.certs_path:
             cert0 = os.path.join(self.certs_path, 'cert_0.cer').replace('\\', '\\\\')
             cert1 = os.path.join(self.certs_path, 'cert_1.cer').replace('\\', '\\\\')
diff --git a/src/azure-cli/HISTORY.rst b/src/azure-cli/HISTORY.rst
index 619b86d82d1..ec8c1a2f5cb 100644
--- a/src/azure-cli/HISTORY.rst
+++ b/src/azure-cli/HISTORY.rst
@@ -3376,7 +3376,7 @@ This version is only available on CentOS 7 and RHEL 7.
 
 **Role**
 
-* [BREAKING CHANGE] `az az/role`: Migrate the underlying API of `az ad` and `az role` from AD Graph API to Microsoft Graph API. For more details, see [Microsoft Graph migration](https://docs.microsoft.com/en-us/cli/azure/microsoft-graph-migration) (#22432)
+* [BREAKING CHANGE] `az az/role`: Migrate the underlying API of `az ad` and `az role` from AD Graph API to Microsoft Graph API. For more details, see [Microsoft Graph migration](https://learn.microsoft.com/en-us/cli/azure/microsoft-graph-migration) (#22432)
 
 **Security**
 
@@ -5110,7 +5110,7 @@ Workload container registration fix, SDK upgraded to 0.12.0, Fixed and Re-ran te
 
 **Service Fabric**
 
-* [BREAKING CHANGE] `az sf cluster certificate`: Remove all commands under this group. Please follow the instructions here to add/remove cluster certificates: https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-cluster-security-update-certs-azure#add-a-secondary-certificate-using-azure-resource-manager. (#18056)
+* [BREAKING CHANGE] `az sf cluster certificate`: Remove all commands under this group. Please follow the instructions here to add/remove cluster certificates: https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cluster-security-update-certs-azure#add-a-secondary-certificate-using-azure-resource-manager. (#18056)
 * [BREAKING CHANGE] `az sf managed-service update`: Remove deprecated parameter --drop-source-replica-on-move. (#18056)
 * [BREAKING CHANGE] `az sf managed-service create`: Remove deprecated parameters --service-dns-name, --drop-source-replica-on-move and -instance-close-delay-duration. (#18056)
 * [BREAKING CHANGE] `az sf cluster`: Rename parameter --vault-resource-group to --vault-rg. (#18056)
@@ -8551,8 +8551,8 @@ Added Cluster commands and trusted_service_access_enabled parameter for Networkr
 
 **Batch**
 
-* Expanded `--json-file` capabilities of `az batch pool create` to allow for specifying MountConfigurations for file system mounts(see https://docs.microsoft.com/en-us/rest/api/batchservice/pool/add#request-body for structure)
-* Expanded `--json-file` capabilities of `az batch pool create` with the optional property publicIPs on NetworkConfiguration. This allows specifying publicIPs to be used when deploying pools (see https://docs.microsoft.com/en-us/rest/api/batchservice/pool/add#request-body for structure)
+* Expanded `--json-file` capabilities of `az batch pool create` to allow for specifying MountConfigurations for file system mounts(see https://learn.microsoft.com/en-us/rest/api/batchservice/pool/add#request-body for structure)
+* Expanded `--json-file` capabilities of `az batch pool create` with the optional property publicIPs on NetworkConfiguration. This allows specifying publicIPs to be used when deploying pools (see https://learn.microsoft.com/en-us/rest/api/batchservice/pool/add#request-body for structure)
 * Expanded `--image` capabilities to support Shared Image Galleries images. Similar to the commands support for Managed Images, to use a Shared Image Gallery image simply use the ARM ID as the value to the argument.
 * [BREAKING CHANGE] When not specified, the default value for `--start-task-wait-for-success` on `az batch pool create` is now true (was false).
 * [BREAKING CHANGE] The default value for Scope on AutoUserSpecification is now always Pool (was Task on Windows nodes, Pool on Linux nodes). This argument is not exposed via the commandline, but can be set in the `--json-file` arguments.
diff --git a/src/azure-cli/README.rst b/src/azure-cli/README.rst
index 20ddc8129d5..abefe0b58bb 100644
--- a/src/azure-cli/README.rst
+++ b/src/azure-cli/README.rst
@@ -107,4 +107,4 @@ License
 Release History
 ===============
 
-See `Azure CLI release notes <https://docs.microsoft.com/cli/azure/release-notes-azure-cli>`__.
+See `Azure CLI release notes <https://learn.microsoft.com/cli/azure/release-notes-azure-cli>`__.
diff --git a/src/azure-cli/azure/cli/command_modules/acr/_errors.py b/src/azure-cli/azure/cli/command_modules/acr/_errors.py
index 1a9f5c18348..9d33a007d08 100644
--- a/src/azure-cli/azure/cli/command_modules/acr/_errors.py
+++ b/src/azure-cli/azure/cli/command_modules/acr/_errors.py
@@ -90,7 +90,7 @@ def format_error_message(self, *args):
 
 CONNECTIVITY_FORBIDDEN_ERROR = ErrorClass(
     "CONNECTIVITY_FORBIDDEN_ERROR",
-    "Looks like you don't have access to registry '{}'. To see configured firewall rules, run 'az acr show --query networkRuleSet --name {}'. Details: https://docs.microsoft.com/azure/container-registry/container-registry-health-error-reference#connectivity_forbidden_error"
+    "Looks like you don't have access to registry '{}'. To see configured firewall rules, run 'az acr show --query networkRuleSet --name {}'. Details: https://learn.microsoft.com/azure/container-registry/container-registry-health-error-reference#connectivity_forbidden_error"
 )
 
 
diff --git a/src/azure-cli/azure/cli/command_modules/acr/helm.py b/src/azure-cli/azure/cli/command_modules/acr/helm.py
index 8cb42c12c26..a2b99a936f7 100644
--- a/src/azure-cli/azure/cli/command_modules/acr/helm.py
+++ b/src/azure-cli/azure/cli/command_modules/acr/helm.py
@@ -187,7 +187,7 @@ def acr_helm_install_cli(client_version='2.16.3', install_location=None, yes=Fal
         logger.warning('Please note that "az acr helm" commands do not work with Helm 3, '
                        'but you can still push Helm chart to ACR using a different command flow. '
                        'For more information, please check out '
-                       'https://docs.microsoft.com/azure/container-registry/container-registry-helm-repos')
+                       'https://learn.microsoft.com/azure/container-registry/container-registry-helm-repos')
 
     install_location, install_dir, cli = _process_helm_install_location_info(install_location)
 
diff --git a/src/azure-cli/azure/cli/command_modules/acs/_help.py b/src/azure-cli/azure/cli/command_modules/acs/_help.py
index 39e4a902e6d..e30aaa47a65 100644
--- a/src/azure-cli/azure/cli/command_modules/acs/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/acs/_help.py
@@ -105,7 +105,7 @@
           - Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5".
           - Minimum-length: 1 character
           - Max-length: 20 characters
-      Reference: https://docs.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminusername?view=azure-dotnet
+      Reference: https://learn.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminusername?view=azure-dotnet
   - name: --windows-admin-password
     type: string
     short-summary: User account password to use on windows node VMs.
@@ -119,7 +119,7 @@
             * Has a digit
             * Has a special character (Regex match [\\W_])
           - Disallowed values:  "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
-      Reference: https://docs.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminpassword?view=azure-dotnet
+      Reference: https://learn.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminpassword?view=azure-dotnet
   - name: --enable-ahub
     type: bool
     short-summary: Enable Azure Hybrid User Benefits (AHUB) for Windows VMs.
@@ -772,7 +772,7 @@
             * Has a digit
             * Has a special character (Regex match [\\W_])
           - Disallowed values:  "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
-      Reference: https://docs.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminpassword?view=azure-dotnet
+      Reference: https://learn.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminpassword?view=azure-dotnet
   - name: --enable-managed-identity
     type: bool
     short-summary: Update current cluster to use managed identity to manage cluster resource group.
@@ -1867,7 +1867,7 @@
     long-summary: This can only be performed on Azure Virtual Machine Scale set backed clusters. Stopping a
         cluster stops the control plane and agent nodes entirely, while maintaining all object and
         cluster state. A cluster does not accrue charges while it is stopped. See `stopping a
-        cluster <https://docs.microsoft.com/azure/aks/start-stop-cluster>`_ for more details about
+        cluster <https://learn.microsoft.com/azure/aks/start-stop-cluster>`_ for more details about
         stopping a cluster.
 """
 
diff --git a/src/azure-cli/azure/cli/command_modules/acs/_validators.py b/src/azure-cli/azure/cli/command_modules/acs/_validators.py
index a12aafe25f1..d266052e801 100644
--- a/src/azure-cli/azure/cli/command_modules/acs/_validators.py
+++ b/src/azure-cli/azure/cli/command_modules/acs/_validators.py
@@ -615,7 +615,7 @@ def validate_azure_keyvault_kms_key_id(namespace):
     key_id = namespace.azure_keyvault_kms_key_id
     if key_id:
         # pylint:disable=line-too-long
-        err_msg = '--azure-keyvault-kms-key-id is not a valid Key Vault key ID. See https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
+        err_msg = '--azure-keyvault-kms-key-id is not a valid Key Vault key ID. See https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
 
         https_prefix = "https://"
         if not key_id.startswith(https_prefix):
diff --git a/src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_validators.py b/src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_validators.py
index 789e426eb1f..393f92dbc2e 100644
--- a/src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_validators.py
+++ b/src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_validators.py
@@ -521,7 +521,7 @@ def test_invalid_azure_keyvault_kms_key_id_without_https(self):
         invalid_azure_keyvault_kms_key_id = "dummy key id"
         namespace = AzureKeyVaultKmsKeyIdNamespace(azure_keyvault_kms_key_id=invalid_azure_keyvault_kms_key_id)
         err = '--azure-keyvault-kms-key-id is not a valid Key Vault key ID. ' \
-              'See https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
+              'See https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
 
         with self.assertRaises(CLIError) as cm:
             validators.validate_azure_keyvault_kms_key_id(namespace)
@@ -531,7 +531,7 @@ def test_invalid_azure_keyvault_kms_key_id_without_key_version(self):
         invalid_azure_keyvault_kms_key_id = "https://fakekeyvault.vault.azure.net/keys/fakekeyname"
         namespace = AzureKeyVaultKmsKeyIdNamespace(azure_keyvault_kms_key_id=invalid_azure_keyvault_kms_key_id)
         err = '--azure-keyvault-kms-key-id is not a valid Key Vault key ID. ' \
-              'See https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
+              'See https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
 
         with self.assertRaises(CLIError) as cm:
             validators.validate_azure_keyvault_kms_key_id(namespace)
@@ -541,7 +541,7 @@ def test_invalid_azure_keyvault_kms_key_id_with_wrong_object_type(self):
         invalid_azure_keyvault_kms_key_id = "https://fakekeyvault.vault.azure.net/secrets/fakesecretname/fakesecretversion"
         namespace = AzureKeyVaultKmsKeyIdNamespace(azure_keyvault_kms_key_id=invalid_azure_keyvault_kms_key_id)
         err = '--azure-keyvault-kms-key-id is not a valid Key Vault key ID. ' \
-              'See https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
+              'See https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name'
 
         with self.assertRaises(CLIError) as cm:
             validators.validate_azure_keyvault_kms_key_id(namespace)
diff --git a/src/azure-cli/azure/cli/command_modules/ams/_params.py b/src/azure-cli/azure/cli/command_modules/ams/_params.py
index a17c4165086..de0d0d035cf 100644
--- a/src/azure-cli/azure/cli/command_modules/ams/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/ams/_params.py
@@ -135,7 +135,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
         c.argument('account_name', account_name_arg_type)
         c.argument('transform_name', name_arg_type, id_part='child_name_1',
                    help='The name of the transform.')
-        c.argument('preset', help='Preset that describes the operations that will be used to modify, transcode, or extract insights from the source file to generate the transform output. Allowed values: {}. In addition to the allowed values, you can also pass a path to a custom Standard Encoder preset JSON file. See https://docs.microsoft.com/rest/api/media/transforms/createorupdate#standardencoderpreset for further details on the settings to use to build a custom preset.'
+        c.argument('preset', help='Preset that describes the operations that will be used to modify, transcode, or extract insights from the source file to generate the transform output. Allowed values: {}. In addition to the allowed values, you can also pass a path to a custom Standard Encoder preset JSON file. See https://learn.microsoft.com/rest/api/media/transforms/createorupdate#standardencoderpreset for further details on the settings to use to build a custom preset.'
                    .format(", ".join(get_presets_definition_name_completion_list())))
         c.argument('insights_to_extract', arg_group='Video Analyzer', arg_type=get_enum_type(InsightsType), help='The type of insights to be extracted. If not set then the type will be selected based on the content type. If the content is audio only then only audio insights will be extracted and if it is video only video insights will be extracted.')
         c.argument('video_analysis_mode', arg_group='Video Analyzer', help='Determines the set of audio analysis operations to be performed. If unspecified, the Standard AudioAnalysisMode would be chosen. Allowed values: {}'.format(", ".join(get_allowed_analysis_modes())))
@@ -200,7 +200,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
                    help='Applies to Live Streaming only. Indicates whether the endTimestamp property must be present. If true, endTimestamp must be specified or a bad request code is returned. Allowed values: false, true.')
         c.argument('bitrate', help='The first quality bitrate.', deprecate_info=c.deprecate(target='--bitrate', redirect='--first-quality', hide=True))
         c.argument('first_quality', help='The first quality (lowest) bitrate to include in the manifest.')
-        c.argument('tracks', help='The JSON representing the track selections. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/assetfilters/createorupdate#filtertrackselection')
+        c.argument('tracks', help='The JSON representing the track selections. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/assetfilters/createorupdate#filtertrackselection')
 
     with self.argument_context('ams asset-filter list') as c:
         c.argument('account_name', id_part=None)
@@ -321,7 +321,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
                    help="The ISO 8601 DateTime end time (Y-m-d'T'H:M:S'Z') of the streaming locator.")
         c.argument('streaming_locator_id', help='The identifier of the streaming locator.')
         c.argument('alternative_media_id', help='An alternative media identifier associated with the streaming locator.')
-        c.argument('content_keys', help='JSON string with the content keys to be used by the streaming locator. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streaminglocators/create#streaminglocatorcontentkey')
+        c.argument('content_keys', help='JSON string with the content keys to be used by the streaming locator. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streaminglocators/create#streaminglocatorcontentkey')
         c.argument('filters', nargs='+', help='A space-separated list of asset filter names and/or account filter names.')
 
     with self.argument_context('ams streaming-locator list') as c:
@@ -333,16 +333,16 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
         c.argument('default_content_key_policy_name', help='Default Content Key used by current streaming policy.')
         c.argument('no_encryption_protocols', nargs='+', help='Space-separated list of enabled protocols for NoEncryption. Allowed values: {}.'.format(", ".join(get_protocols_completion_list())))
         c.argument('envelope_protocols', nargs='+', arg_group='Envelope Encryption', help='Space-separated list of enabled protocols for Envelope Encryption. Allowed values: {}.'.format(", ".join(get_protocols_completion_list())))
-        c.argument('envelope_clear_tracks', arg_group='Envelope Encryption', help='The JSON representing which tracks should not be encrypted. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streamingpolicies/create#trackselection')
-        c.argument('envelope_key_to_track_mappings', arg_group='Envelope Encryption', help='The JSON representing a list of StreamingPolicyContentKey. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streamingpolicies/create#streamingpolicycontentkey')
+        c.argument('envelope_clear_tracks', arg_group='Envelope Encryption', help='The JSON representing which tracks should not be encrypted. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streamingpolicies/create#trackselection')
+        c.argument('envelope_key_to_track_mappings', arg_group='Envelope Encryption', help='The JSON representing a list of StreamingPolicyContentKey. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streamingpolicies/create#streamingpolicycontentkey')
         c.argument('envelope_default_key_label', arg_group='Envelope Encryption', help='Label used to specify Content Key when creating a streaming locator.')
         c.argument('envelope_default_key_policy_name', arg_group='Envelope Encryption', help='Policy used by Default Key.')
         c.argument('envelope_template', arg_group='Envelope Encryption', help='The KeyAcquistionUrlTemplate is used to point to user specified service to delivery content keys.')
         c.argument('cenc_protocols', nargs='+', arg_group='Common Encryption CENC', help='Space-separated list of enabled protocols for Common Encryption CENC. Allowed values: {}.'.format(", ".join(get_protocols_completion_list())))
         c.argument('cenc_default_key_label', arg_group='Common Encryption CENC', help='Label to specify Default Content Key for an encryption scheme.')
         c.argument('cenc_default_key_policy_name', arg_group='Common Encryption CENC', help='Policy used by Default Content Key.')
-        c.argument('cenc_clear_tracks', arg_group='Common Encryption CENC', help='The JSON representing which tracks should not be encrypted. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streamingpolicies/create#trackselection')
-        c.argument('cenc_key_to_track_mappings', arg_group='Common Encryption CENC', help='The JSON representing a list of StreamingPolicyContentKey. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streamingpolicies/create#streamingpolicycontentkey')
+        c.argument('cenc_clear_tracks', arg_group='Common Encryption CENC', help='The JSON representing which tracks should not be encrypted. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streamingpolicies/create#trackselection')
+        c.argument('cenc_key_to_track_mappings', arg_group='Common Encryption CENC', help='The JSON representing a list of StreamingPolicyContentKey. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streamingpolicies/create#streamingpolicycontentkey')
         c.argument('cenc_play_ready_attributes', arg_group='Common Encryption CENC', help='Custom attributes for PlayReady.')
         c.argument('cenc_widevine_template', arg_group='Common Encryption CENC', help='The custom license acquisition URL template for a customer service to deliver keys to end users. Not needed when using Azure Media Services for issuing keys.')
         c.argument('cenc_play_ready_template', arg_group='Common Encryption CENC', help='The custom license acquisition URL template for a customer service to deliver keys to end users. Not needed when using Azure Media Services for issuing keys.')
@@ -351,8 +351,8 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
         c.argument('cbcs_protocols', nargs='+', arg_group='Common Encryption CBCS', help='Space-separated list of enabled protocols for Common Encryption CBCS. Allowed values: {}.'.format(", ".join(get_protocols_completion_list())))
         c.argument('cbcs_default_key_label', arg_group='Common Encryption CBCS', help='Label to specify Default Content Key for an encryption scheme.')
         c.argument('cbcs_default_key_policy_name', arg_group='Common Encryption CBCS', help='Policy used by Default Content Key.')
-        c.argument('cbcs_clear_tracks', arg_group='Common Encryption CBCS', help='The JSON representing which tracks should not be encrypted. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streamingpolicies/create#trackselection')
-        c.argument('cbcs_key_to_track_mappings', arg_group='Common Encryption CBCS', help='The JSON representing a list of StreamingPolicyContentKey. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/streamingpolicies/create#streamingpolicycontentkey')
+        c.argument('cbcs_clear_tracks', arg_group='Common Encryption CBCS', help='The JSON representing which tracks should not be encrypted. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streamingpolicies/create#trackselection')
+        c.argument('cbcs_key_to_track_mappings', arg_group='Common Encryption CBCS', help='The JSON representing a list of StreamingPolicyContentKey. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/streamingpolicies/create#streamingpolicycontentkey')
         c.argument('cbcs_play_ready_attributes', arg_group='Common Encryption CBCS', help='Custom attributes for PlayReady.', deprecate_info=c.deprecate(hide=True))
         c.argument('cbcs_play_ready_template', arg_group='Common Encryption CBCS', help='The custom license acquisition URL template for a customer service to deliver keys to end users. Not needed when using Azure Media Services for issuing keys.', deprecate_info=c.deprecate(hide=True))
         c.argument('cbcs_widevine_template', arg_group='Common Encryption CBCS', help='The custom license acquisition URL template for a customer service to deliver keys to end users. Not needed when using Azure Media Services for issuing keys.', deprecate_info=c.deprecate(hide=True))
@@ -375,9 +375,9 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
         c.argument('cdn_provider', arg_group='CDN Support', help='The CDN provider name. Allowed values: {}.'.format(", ".join(get_cdn_provider_completion_list())))
         c.argument('cdn_profile', arg_group='CDN Support', help='The CDN profile name.')
         c.argument('client_access_policy', arg_group='Cross Site Access Policies',
-                   help='The XML representing the clientaccesspolicy data used by Microsoft Silverlight and Adobe Flash. Use @{file} to load from a file. For further information about the XML structure please refer to documentation on https://docs.microsoft.com/rest/api/media/operations/crosssiteaccesspolicies')
+                   help='The XML representing the clientaccesspolicy data used by Microsoft Silverlight and Adobe Flash. Use @{file} to load from a file. For further information about the XML structure please refer to documentation on https://learn.microsoft.com/rest/api/media/operations/crosssiteaccesspolicies')
         c.argument('cross_domain_policy', arg_group='Cross Site Access Policies',
-                   help='The XML representing the crossdomain data used by Silverlight. Use @{file} to load from a file. For further information about the XML structure please refer to documentation on https://docs.microsoft.com/rest/api/media/operations/crosssiteaccesspolicies')
+                   help='The XML representing the crossdomain data used by Silverlight. Use @{file} to load from a file. For further information about the XML structure please refer to documentation on https://learn.microsoft.com/rest/api/media/operations/crosssiteaccesspolicies')
         c.argument('auto_start', action='store_true', help='The flag indicates if the resource should be automatically started on creation.')
         c.argument('ips', nargs='+', arg_group='Access Control Support', help='Space-separated IP addresses for access control. Allowed IP addresses can be specified as either a single IP address (e.g. "10.0.0.1") or as an IP range using an IP address and a CIDR subnet mask (e.g. "10.0.0.1/22"). Use "" to clear existing list. If no IP addresses are specified any IP address will be allowed.')
         c.argument('disable_cdn', arg_group='CDN Support', action='store_true', help='Use this flag to disable CDN for the streaming endpoint.')
@@ -465,7 +465,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
                    help='Applies to Live Streaming only. Indicates whether the endTimestamp property must be present. If true, endTimestamp must be specified or a bad request code is returned. Allowed values: false, true.')
         c.argument('bitrate', help='The first quality bitrate.', deprecate_info=c.deprecate(target='--bitrate', redirect='--first-quality', hide=True))
         c.argument('first_quality', help='The first quality (lowest) bitrate to include in the manifest.')
-        c.argument('tracks', help='The JSON representing the track selections. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://docs.microsoft.com/rest/api/media/accountfilters/createorupdate#filtertrackselection')
+        c.argument('tracks', help='The JSON representing the track selections. Use @{file} to load from a file. For further information about the JSON structure please refer to swagger documentation on https://learn.microsoft.com/rest/api/media/accountfilters/createorupdate#filtertrackselection')
 
     with self.argument_context('ams account-filter list') as c:
         c.argument('account_name', id_part=None)
diff --git a/src/azure-cli/azure/cli/command_modules/ams/operations/sp.py b/src/azure-cli/azure/cli/command_modules/ams/operations/sp.py
index 23bfaf34afc..fbccd1f6f0d 100644
--- a/src/azure-cli/azure/cli/command_modules/ams/operations/sp.py
+++ b/src/azure-cli/azure/cli/command_modules/ams/operations/sp.py
@@ -277,7 +277,7 @@ def create_application(client, display_name):
         return client.application_create(app_create_param)
     except GraphError as ex:
         if 'insufficient privileges' in str(ex).lower():
-            link = ('https://docs.microsoft.com/en-us/azure/azure-resource-manager/' +
+            link = ('https://learn.microsoft.com/en-us/azure/azure-resource-manager/' +
                     'resource-group-create-service-principal-portal')
             raise CLIError("Directory permission is needed for the current user to register the application. "
                            "For how to configure, please refer '{}'. Original error: {}".format(link, ex))
diff --git a/src/azure-cli/azure/cli/command_modules/ams/operations/streaming_policy.py b/src/azure-cli/azure/cli/command_modules/ams/operations/streaming_policy.py
index 0ace34c0924..55f673e9445 100644
--- a/src/azure-cli/azure/cli/command_modules/ams/operations/streaming_policy.py
+++ b/src/azure-cli/azure/cli/command_modules/ams/operations/streaming_policy.py
@@ -228,7 +228,7 @@ def _parse_clear_tracks_json(clear_tracks):
         except TypeError as ex:
             errorMessage = 'For further information on how to build the JSON ' \
                 'containing a list of TrackSelection, please refer to ' \
-                'https://docs.microsoft.com/en-us/rest/api/media/streamingpolicies/create#trackselection'
+                'https://learn.microsoft.com/en-us/rest/api/media/streamingpolicies/create#trackselection'
             raise CLIError('{}. {}'.format(str(ex), errorMessage))
     return clear_tracks_result
 
diff --git a/src/azure-cli/azure/cli/command_modules/appconfig/_params.py b/src/azure-cli/azure/cli/command_modules/appconfig/_params.py
index 10c830fddd5..e4ac71c5a9b 100644
--- a/src/azure-cli/azure/cli/command_modules/appconfig/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/appconfig/_params.py
@@ -144,7 +144,7 @@ def load_arguments(self, _):
                    'If the auth mode is "key", provide connection string or store name and your account access keys will be retrieved for authorization. ' +
                    'If the auth mode is "login", provide the `--endpoint` or `--name` and your "az login" credentials will be used for authorization. ' +
                    'You can configure the default auth mode using `az configure --defaults appconfig_auth_mode=<auth_mode>`. ' +
-                   'For more information, see https://docs.microsoft.com/azure/azure-app-configuration/concept-enable-rbac')
+                   'For more information, see https://learn.microsoft.com/azure/azure-app-configuration/concept-enable-rbac')
 
     with self.argument_context('appconfig create') as c:
         c.argument('sku', help='The sku of the App Configuration store', arg_type=get_enum_type(['Free', 'Premium', 'Standard']), validator=validate_sku)
@@ -263,7 +263,7 @@ def load_arguments(self, _):
     with self.argument_context('appconfig kv export', arg_group='AppService') as c:
         c.argument('appservice_account', validator=validate_appservice_name_or_id, help='ARM ID for AppService OR the name of the AppService, assuming it is in the same subscription and resource group as the App Configuration store. Required for AppService arguments')
         c.argument('export_as_reference', options_list=['--export-as-reference', '-r'], arg_type=get_three_state_flag(), validator=validate_export_as_reference,
-                   help="Export key-values as App Configuration references. For more information, see https://docs.microsoft.com/en-us/azure/app-service/app-service-configuration-references")
+                   help="Export key-values as App Configuration references. For more information, see https://learn.microsoft.com/en-us/azure/app-service/app-service-configuration-references")
 
     with self.argument_context('appconfig kv set') as c:
         c.argument('key', validator=validate_key, help="Key to be set. Key cannot be a '.' or '..', or contain the '%' character.")
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/_validators.py b/src/azure-cli/azure/cli/command_modules/appservice/_validators.py
index a3b8ed826a3..a888b3e7faa 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/_validators.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/_validators.py
@@ -99,12 +99,12 @@ def _validate_asp_sku(sku, app_service_environment, zone_redundant):
         if not app_service_environment:
             raise ValidationError("The pricing tier 'Isolated' is not allowed for this app service plan. "
                                   "Use this link to learn more: "
-                                  "https://docs.microsoft.com/azure/app-service/overview-hosting-plans")
+                                  "https://learn.microsoft.com/azure/app-service/overview-hosting-plans")
     else:
         if app_service_environment:
             raise ValidationError("Only pricing tier 'IsolatedV2' and 'IsolatedMV2' is allowed in this "
                                   "app service plan. Use this link to "
-                                  "learn more: https://docs.microsoft.com/azure/app-service/overview-hosting-plans")
+                                  "learn more: https://learn.microsoft.com/azure/app-service/overview-hosting-plans")
 
 
 def validate_asp_create(namespace):
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/_list_service_tags.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/_list_service_tags.py
index 8b52e856368..0efda781a4c 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/_list_service_tags.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/_list_service_tags.py
@@ -14,7 +14,7 @@
 class ListServiceTags(AAZCommand):
     """List all service tags which are below to different resources
 
-    A service tag represents a group of IP address prefixes to help minimize complexity for security rule creation. To learn more about list-service-tags, visit https://docs.microsoft.com/azure/virtual-network/security-overview#service-tags. Note that the location parameter is used as a reference for version (not as a filter based on location). For example, even if you specify --location eastus2 you will get the list of service tags with prefix details across all regions but limited to the cloud that your subscription belongs to (i.e. Public, US government, China or Germany).
+    A service tag represents a group of IP address prefixes to help minimize complexity for security rule creation. To learn more about list-service-tags, visit https://learn.microsoft.com/azure/virtual-network/security-overview#service-tags. Note that the location parameter is used as a reference for version (not as a filter based on location). For example, even if you specify --location eastus2 you will get the list of service tags with prefix details across all regions but limited to the cloud that your subscription belongs to (i.e. Public, US government, China or Germany).
 
     :example: Gets a list of service tag information resources. (autogenerated)
         az network list-service-tags --location westus2
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
index 79bec603989..22ad607bc90 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/commands.py b/src/azure-cli/azure/cli/command_modules/appservice/commands.py
index 761f108643f..73646fcca04 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/commands.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/commands.py
@@ -85,7 +85,7 @@ def _polish_bad_errors(ex, creating_plan):
                         detail = ("Plan with requested features is not supported in current region. \n"
                                   "If creating an App Service Plan with --zone-redundant/-z, "
                                   "please see supported regions here: "
-                                  "https://docs.microsoft.com/en-us/azure/app-service/how-to-zone-redundancy#requirements")
+                                  "https://learn.microsoft.com/en-us/azure/app-service/how-to-zone-redundancy#requirements")
         else:
             detail = json.loads(ex.error_msg.response.text())['Message']
         ex = CLIError(detail)
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/custom.py b/src/azure-cli/azure/cli/command_modules/appservice/custom.py
index 39c310bafa3..26f6aafd569 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/custom.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/custom.py
@@ -6575,7 +6575,7 @@ def webapp_up(cmd, name=None, resource_group_name=None, plan=None, location=None
             raise ValidationError("The webapp '{}' is a {} app. The code detected at '{}' will default to "
                                   "'{}'. Please create a new app "
                                   "to continue this operation. For more information on default behaviors, "
-                                  "see https://docs.microsoft.com/cli/azure/webapp?view=azure-cli-latest#az_webapp_up."
+                                  "see https://learn.microsoft.com/cli/azure/webapp?view=azure-cli-latest#az_webapp_up."
                                   .format(name, current_os, src_dir, os_name))
         _is_linux = plan_info.reserved
         # for an existing app check if the runtime version needs to be updated
diff --git a/src/azure-cli/azure/cli/command_modules/appservice/tests/latest/test_webapp_commands.py b/src/azure-cli/azure/cli/command_modules/appservice/tests/latest/test_webapp_commands.py
index 71cd5bd815b..4c88072e556 100644
--- a/src/azure-cli/azure/cli/command_modules/appservice/tests/latest/test_webapp_commands.py
+++ b/src/azure-cli/azure/cli/command_modules/appservice/tests/latest/test_webapp_commands.py
@@ -1649,7 +1649,7 @@ def test_webapp_ssl(self, resource_group, resource_group_location):
         webapp_name = self.create_random_name(prefix='web-ssl-test', length=20)
         slot_name = self.create_random_name(prefix='slot-ssl-test', length=20)
         # Cert Generated using
-        # https://docs.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
+        # https://learn.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
         pfx_file = os.path.join(TEST_DIR, 'server.pfx')
         cert_password = 'test'
         cert_thumbprint = '9E9735C45C792B03B3FFCCA614852B32EE71AD6B'
@@ -1717,7 +1717,7 @@ def test_webapp_ssl_specify_hostname(self, resource_group, resource_group_locati
         plan = self.create_random_name(prefix='ssl-test-plan', length=24)
         webapp_name = self.create_random_name(prefix='web-ssl-test', length=20)
         # Cert Generated using
-        # https://docs.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
+        # https://learn.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
         pfx_file = os.path.join(TEST_DIR, 'server.pfx')
         cert_password = 'test'
         cert_thumbprint = '9E9735C45C792B03B3FFCCA614852B32EE71AD6B'
@@ -1746,7 +1746,7 @@ def test_webapp_ssl_import(self, resource_group, key_vault):
         plan_name = self.create_random_name(prefix='ssl-test-plan', length=24)
         webapp_name = self.create_random_name(prefix='web-ssl-test', length=20)
         # Cert Generated using
-        # https://docs.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
+        # https://learn.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
         pfx_file = os.path.join(TEST_DIR, 'server.pfx')
         cert_password = 'test'
         cert_thumbprint = '9E9735C45C792B03B3FFCCA614852B32EE71AD6B'
@@ -1780,7 +1780,7 @@ def test_webapp_ssl_import_crossrg(self, resource_group, kv_resource_group):
         webapp_name = self.create_random_name(prefix='web-ssl-test', length=20)
         kv_name = self.create_random_name(prefix='kv-ssl-test', length=20)
         # Cert Generated using
-        # https://docs.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
+        # https://learn.microsoft.com/azure/app-service-web/web-sites-configure-ssl-certificate#bkmk_ssopenssl
         pfx_file = os.path.join(TEST_DIR, 'server.pfx')
         cert_password = 'test'
         cert_thumbprint = '9E9735C45C792B03B3FFCCA614852B32EE71AD6B'
diff --git a/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/aro/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/backup/_help.py b/src/azure-cli/azure/cli/command_modules/backup/_help.py
index 3dadea3ee74..5aae86d2383 100644
--- a/src/azure-cli/azure/cli/command_modules/backup/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/backup/_help.py
@@ -38,7 +38,7 @@
 type: command
 short-summary: Reset the registration details for a given container.
 examples:
-  - name: Reset the registration details for a given container. To be used only in error scenarios as specified here (https://docs.microsoft.com/azure/backup/backup-sql-server-azure-troubleshoot#re-registration-failures). Understand the failure symptoms and causes before attempting re-registration.
+  - name: Reset the registration details for a given container. To be used only in error scenarios as specified here (https://learn.microsoft.com/azure/backup/backup-sql-server-azure-troubleshoot#re-registration-failures). Understand the failure symptoms and causes before attempting re-registration.
     text: az backup container re-register --resource-group MyResourceGroup --vault-name MyVault --container-name MyContainer --workload-type MSSQL --backup-management-type AzureWorkload --yes
 """
 
diff --git a/src/azure-cli/azure/cli/command_modules/batch/_help.py b/src/azure-cli/azure/cli/command_modules/batch/_help.py
index 2fce8dcba1f..01258cfcb9a 100644
--- a/src/azure-cli/azure/cli/command_modules/batch/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/batch/_help.py
@@ -91,7 +91,7 @@
 helps['batch account outbound-endpoints'] = """
 type: command
 short-summary: List an account's outbound network dependencies.
-long-summary: List the endpoints that a Batch Compute Node under this Batch Account may call as part of Batch service administration. If you are deploying a Pool inside of a virtual network that you specify, you must make sure your network allows outbound access to these endpoints. Failure to allow access to these endpoints may cause Batch to mark the affected nodes as unusable. For more information about creating a pool inside of a virtual network, see https://docs.microsoft.com/azure/batch/batch-virtual-network."
+long-summary: List the endpoints that a Batch Compute Node under this Batch Account may call as part of Batch service administration. If you are deploying a Pool inside of a virtual network that you specify, you must make sure your network allows outbound access to these endpoints. Failure to allow access to these endpoints may cause Batch to mark the affected nodes as unusable. For more information about creating a pool inside of a virtual network, see https://learn.microsoft.com/azure/batch/batch-virtual-network."
 """
 
 helps['batch account identity'] = """
diff --git a/src/azure-cli/azure/cli/command_modules/batch/_params.py b/src/azure-cli/azure/cli/command_modules/batch/_params.py
index 5559f9f3446..2924c45720b 100644
--- a/src/azure-cli/azure/cli/command_modules/batch/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/batch/_params.py
@@ -236,7 +236,7 @@ def load_arguments(self, _):
             c.argument('pool_id', options_list=('--pool-id',), help='The id of an existing pool. All the tasks of the job will run on the specified pool.')
 
     with self.argument_context('batch pool create') as c:
-        c.argument('json_file', help='The file containing pool create properties parameter specification in JSON(formatted to match REST API request body). If this parameter is specified, all \'Pool Create Properties Parameter Arguments\' are ignored.  See https://docs.microsoft.com/en-us/rest/api/batchservice/pool/add?tabs=HTTP#request-body')
+        c.argument('json_file', help='The file containing pool create properties parameter specification in JSON(formatted to match REST API request body). If this parameter is specified, all \'Pool Create Properties Parameter Arguments\' are ignored.  See https://learn.microsoft.com/en-us/rest/api/batchservice/pool/add?tabs=HTTP#request-body')
         c.argument('os_family', arg_type=get_enum_type(['2', '3', '4', '5', '6']))
         c.argument('auto_scale_formula', help='A formula for the desired number of compute nodes in the pool. The formula is checked for validity before the pool is created. If the formula is not valid, the Batch service rejects the request with detailed error information. For more information about specifying this formula, see https://azure.microsoft.com/documentation/articles/batch-automatic-scaling/.')
         c.extra('resource_tags', arg_group='Pool', type=resource_tag_format, help="User is able to specify resource tags for the pool. Any resource created for the pool will then also be tagged by the same resource tags")
diff --git a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/README.md b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/README.md
index cd642951ff9..100a3f619ae 100644
--- a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/README.md
+++ b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/README.md
@@ -5,7 +5,7 @@ The Batch module includes both data plane tests and management tests, which shou
 ## Bootstrap Resources
 
 1. Create (or reuse) a Batch account
-1. Configure the Batch account for [user subscription mode](https://docs.microsoft.com/azure/batch/batch-account-create-portal#additional-configuration-for-user-subscription-mode)
+1. Configure the Batch account for [user subscription mode](https://learn.microsoft.com/azure/batch/batch-account-create-portal#additional-configuration-for-user-subscription-mode)
 1. Set environment variables. For management tests these variables should be empty. In playback mode, the account name and URL will be read from the recorded file instead, and the key will be set to a default value.
 
    ```powershell
diff --git a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.2.0.help.txt b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.2.0.help.txt
index f61392dba8b..9a4b82dc9c8 100644
--- a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.2.0.help.txt
+++ b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.2.0.help.txt
@@ -677,7 +677,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter          : An OData $filter clause. For more information on constructing this filter,
-                        see https://docs.microsoft.com/rest/api/batchservice/odata-filters-in-
+                        see https://learn.microsoft.com/rest/api/batchservice/odata-filters-in-
                         batch#list-certificates.
     --select          : An OData $select clause.
 
@@ -903,7 +903,7 @@ Batch Account Arguments
 Pre-condition and Query Arguments
     --expand          : An OData $expand clause.
     --filter          : An OData $filter clause. For more information on constructing this filter,
-                        see https://docs.microsoft.com/rest/api/batchservice/odata-filters-in-
+                        see https://learn.microsoft.com/rest/api/batchservice/odata-filters-in-
                         batch#list-pools.
     --select          : An OData $select clause.
 
@@ -1270,7 +1270,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter          : An OData $filter clause. For more information on constructing this filter,
-                        see https://docs.microsoft.com/rest/api/batchservice/odata-filters-in-
+                        see https://learn.microsoft.com/rest/api/batchservice/odata-filters-in-
                         batch#list-node-agent-skus.
 
 Global Arguments
@@ -1385,7 +1385,7 @@ Pre-condition and Query Arguments
                         hours before the current time. If not specified this defaults to the end
                         time of the last aggregation interval currently available.
     --filter          : An OData $filter clause. For more information on constructing this filter,
-                        see https://docs.microsoft.com/rest/api/batchservice/odata-filters-in-
+                        see https://learn.microsoft.com/rest/api/batchservice/odata-filters-in-
                         batch#list-account-usage-metrics.
     --start-time      : The earliest time from which to include metrics. This must be at least two
                         and a half hours before the current time. If not specified this defaults to
@@ -1734,7 +1734,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter            : An OData $filter clause. For more information on constructing this filter,
-                          see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                          see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                           in-batch#list-nodes-in-a-pool.
     --select            : An OData $select clause.
 
@@ -2291,7 +2291,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter            : An OData $filter clause. For more information on constructing this filter,
-                          see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                          see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                           in-batch#list-compute-node-files.
 
 Global Arguments
@@ -2909,7 +2909,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-job-preparation-and-release-status.
     --select           : An OData $select clause.
 
@@ -3789,7 +3789,7 @@ Batch Account Arguments
 Pre-condition and Query Arguments
     --expand          : An OData $expand clause.
     --filter          : An OData $filter clause. For more information on constructing this filter,
-                        see https://docs.microsoft.com/rest/api/batchservice/odata-filters-in-
+                        see https://learn.microsoft.com/rest/api/batchservice/odata-filters-in-
                         batch#list-job-schedules.
     --select          : An OData $select clause.
 
@@ -3910,7 +3910,7 @@ Batch Account Arguments
 Pre-condition and Query Arguments
     --expand           : An OData $expand clause.
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-tasks.
     --select           : An OData $select clause.
 
@@ -4337,7 +4337,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter            : An OData $filter clause. For more information on constructing this filter,
-                          see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                          see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                           in-batch#list-task-files.
 
 Global Arguments
diff --git a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.4.0.help.txt b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.4.0.help.txt
index fc6f21f0bf2..c7fec946c00 100644
--- a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.4.0.help.txt
+++ b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/cli-3.4.0.help.txt
@@ -754,7 +754,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-certificates.
     --select           : An OData $select clause.
 
@@ -923,7 +923,7 @@ Pool: Start Task Arguments
                                         MyCommand" in Linux. If the command line refers to file
                                         paths, it should use a relative path (relative to the task
                                         working directory), or use the Batch provided environment
-                                        variable (https://docs.microsoft.com/en-
+                                        variable (https://learn.microsoft.com/en-
                                         us/azure/batch/batch-compute-node-environment-variables).
     --start-task-resource-files       : A list of files that the Batch service will download to the
                                         compute node before running the command line.  There is a
@@ -1002,7 +1002,7 @@ Batch Account Arguments
 Pre-condition and Query Arguments
     --expand           : An OData $expand clause.
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-pools.
     --select           : An OData $select clause.
 
@@ -1179,7 +1179,7 @@ Pool: Start Task Arguments
                                         MyCommand" in Linux. If the command line refers to file
                                         paths, it should use a relative path (relative to the task
                                         working directory), or use the Batch provided environment
-                                        variable (https://docs.microsoft.com/en-
+                                        variable (https://learn.microsoft.com/en-
                                         us/azure/batch/batch-compute-node-environment-variables).
     --start-task-environment-settings : A list of environment variable settings for the start task.
                                         Space-separated values in 'key=value' format.
@@ -1405,7 +1405,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-node-agent-skus.
 
 Global Arguments
@@ -1527,7 +1527,7 @@ Pre-condition and Query Arguments
                          hours before the current time. If not specified this defaults to the end
                          time of the last aggregation interval currently available.
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-account-usage-metrics.
     --start-time       : The earliest time from which to include metrics. This must be at least two
                          and a half hours before the current time. If not specified this defaults to
@@ -1760,7 +1760,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch.
 
 Global Arguments
@@ -1907,7 +1907,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter             : An OData $filter clause. For more information on constructing this
-                           filter, see https://docs.microsoft.com/rest/api/batchservice/odata-
+                           filter, see https://learn.microsoft.com/rest/api/batchservice/odata-
                            filters-in-batch#list-nodes-in-a-pool.
     --select             : An OData $select clause.
 
@@ -2521,7 +2521,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter             : An OData $filter clause. For more information on constructing this
-                           filter, see https://docs.microsoft.com/rest/api/batchservice/odata-
+                           filter, see https://learn.microsoft.com/rest/api/batchservice/odata-
                            filters-in-batch#list-compute-node-files.
 
 Global Arguments
@@ -2631,7 +2631,7 @@ Job: Job Manager Task Arguments
                                               Linux. If the command line refers to file paths, it
                                               should use a relative path (relative to the task
                                               working directory), or use the Batch provided
-                                              environment variable (https://docs.microsoft.com/en-
+                                              environment variable (https://learn.microsoft.com/en-
                                               us/azure/batch/batch-compute-node-environment-
                                               variables).
     --job-manager-task-environment-settings : A list of environment variable settings for the Job
@@ -3200,7 +3200,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter            : An OData $filter clause. For more information on constructing this filter,
-                          see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                          see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                           in-batch#list-job-preparation-and-release-status.
     --select            : An OData $select clause.
 
@@ -3356,7 +3356,7 @@ Cloud Job Schedule: Job Specification: Job Manager Task Arguments
                                         -c MyCommand" in Linux. If the command line refers to file
                                         paths, it should use a relative path (relative to the task
                                         working directory), or use the Batch provided environment
-                                        variable (https://docs.microsoft.com/en-
+                                        variable (https://learn.microsoft.com/en-
                                         us/azure/batch/batch-compute-node-environment-variables).
     --job-manager-task-id             : Required. A string that uniquely identifies the Job Manager
                                         task within the job. The ID can contain any combination of
@@ -3635,7 +3635,7 @@ Job Schedule: Job Specification: Job Manager Task Arguments
                                                         should use a relative path (relative to the
                                                         task working directory), or use the Batch
                                                         provided environment variable
-                                                        (https://docs.microsoft.com/en-
+                                                        (https://learn.microsoft.com/en-
                                                         us/azure/batch/batch-compute-node-
                                                         environment-variables).
     --job-manager-task-environment-settings           : A list of environment variable settings for
@@ -3867,7 +3867,7 @@ Job Schedule: Job Specification: Job Manager Task Arguments
                                                         should use a relative path (relative to the
                                                         task working directory), or use the Batch
                                                         provided environment variable
-                                                        (https://docs.microsoft.com/en-
+                                                        (https://learn.microsoft.com/en-
                                                         us/azure/batch/batch-compute-node-
                                                         environment-variables).
     --job-manager-task-environment-settings           : A list of environment variable settings for
@@ -4161,7 +4161,7 @@ Batch Account Arguments
 Pre-condition and Query Arguments
     --expand           : An OData $expand clause.
     --filter           : An OData $filter clause. For more information on constructing this filter,
-                         see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                         see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                          in-batch#list-job-schedules.
     --select           : An OData $select clause.
 
@@ -4297,7 +4297,7 @@ Batch Account Arguments
 Pre-condition and Query Arguments
     --expand            : An OData $expand clause.
     --filter            : An OData $filter clause. For more information on constructing this filter,
-                          see https://docs.microsoft.com/rest/api/batchservice/odata-filters-
+                          see https://learn.microsoft.com/rest/api/batchservice/odata-filters-
                           in-batch#list-tasks.
     --select            : An OData $select clause.
 
@@ -4769,7 +4769,7 @@ Batch Account Arguments
 
 Pre-condition and Query Arguments
     --filter             : An OData $filter clause. For more information on constructing this
-                           filter, see https://docs.microsoft.com/rest/api/batchservice/odata-
+                           filter, see https://learn.microsoft.com/rest/api/batchservice/odata-
                            filters-in-batch#list-task-files.
 
 Global Arguments
diff --git a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/test_batch_general_arm_cmd.yaml b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/test_batch_general_arm_cmd.yaml
index 4d71e8f1321..797ad5b92f5 100644
--- a/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/test_batch_general_arm_cmd.yaml
+++ b/src/azure-cli/azure/cli/command_modules/batch/tests/latest/recordings/test_batch_general_arm_cmd.yaml
@@ -759,12 +759,12 @@ interactions:
         to Azure Batch pools using Classic communication mode.","endpointDetails":[{"port":443}]}]},{"category":"Microsoft
         Package Repository","endpoints":[{"domainName":"packages.microsoft.com","description":"Only
         applicable to pools containing a Mount Configuration. Learn about Mount Configurations
-        in Batch at https://docs.microsoft.com/azure/batch/virtual-file-mount.","endpointDetails":[{"port":443}]}]},{"category":"Azure
+        in Batch at https://learn.microsoft.com/azure/batch/virtual-file-mount.","endpointDetails":[{"port":443}]}]},{"category":"Azure
         Key Vault","endpoints":[{"domainName":"*.vault.azure.net","description":"Only
         applicable to pools that have a Disk Encryption Configuration containing Temporary
         Disk as an encryption target and which use a VM size that does not support
-        encryption at host. Learn more about disk encryption in Batch at https://docs.microsoft.com/azure/batch/disk-encryption.
-        Learn more about encryption at host and supported VM sizes at https://docs.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal.","endpointDetails":[{"port":443}]}]}]}'
+        encryption at host. Learn more about disk encryption in Batch at https://learn.microsoft.com/azure/batch/disk-encryption.
+        Learn more about encryption at host and supported VM sizes at https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal.","endpointDetails":[{"port":443}]}]}]}'
     headers:
       cache-control:
       - no-cache
diff --git a/src/azure-cli/azure/cli/command_modules/botservice/custom.py b/src/azure-cli/azure/cli/command_modules/botservice/custom.py
index c9494b414a9..9b550953d6b 100644
--- a/src/azure-cli/azure/cli/command_modules/botservice/custom.py
+++ b/src/azure-cli/azure/cli/command_modules/botservice/custom.py
@@ -116,7 +116,7 @@ def create(cmd, client, resource_group_name, resource_name, msa_app_id, msa_app_
     except Exception as e:
         logger.debug(e)
         raise CLIError("--appid must be a valid GUID from a Microsoft Azure AD Application Registration. See "
-                       "https://docs.microsoft.com/azure/active-directory/develop/quickstart-register-app for "
+                       "https://learn.microsoft.com/azure/active-directory/develop/quickstart-register-app for "
                        "more information on App Registrations. See 'az bot create --help' for more CLI information.")
 
     # If display name was not provided, just use the resource name
diff --git a/src/azure-cli/azure/cli/command_modules/botservice/tests/latest/test_bot_commands.py b/src/azure-cli/azure/cli/command_modules/botservice/tests/latest/test_bot_commands.py
index bfde73ef655..6329ee14ea2 100644
--- a/src/azure-cli/azure/cli/command_modules/botservice/tests/latest/test_bot_commands.py
+++ b/src/azure-cli/azure/cli/command_modules/botservice/tests/latest/test_bot_commands.py
@@ -474,7 +474,7 @@ def test_botservice_create_should_raise_error_for_invalid_app_id_args(self, reso
         })
 
         expected_error = "--appid must be a valid GUID from a Microsoft Azure AD Application Registration. See " \
-                         "https://docs.microsoft.com/azure/active-directory/develop/quickstart-register-app " \
+                         "https://learn.microsoft.com/azure/active-directory/develop/quickstart-register-app " \
                          "for more information on App Registrations. See 'az bot create --help' for more CLI " \
                          "information."
         try:
diff --git a/src/azure-cli/azure/cli/command_modules/cdn/_help.py b/src/azure-cli/azure/cli/command_modules/cdn/_help.py
index 3d29d97e5e7..9d8a7018088 100644
--- a/src/azure-cli/azure/cli/command_modules/cdn/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/cdn/_help.py
@@ -628,7 +628,7 @@
 
 helps['afd'] = """
 type: group
-short-summary: Manage Azure Front Door Standard/Premium. For classical Azure Front Door, please refer https://docs.microsoft.com/en-us/cli/azure/network/front-door?view=azure-cli-latest
+short-summary: Manage Azure Front Door Standard/Premium. For classical Azure Front Door, please refer https://learn.microsoft.com/en-us/cli/azure/network/front-door?view=azure-cli-latest
 """
 
 helps['afd profile'] = """
diff --git a/src/azure-cli/azure/cli/command_modules/cdn/_params.py b/src/azure-cli/azure/cli/command_modules/cdn/_params.py
index b317fb7b866..5bfe9a3ea6e 100644
--- a/src/azure-cli/azure/cli/command_modules/cdn/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/cdn/_params.py
@@ -110,12 +110,12 @@ def configure_rule_parameters(c, is_afdx):
     if is_afdx:
         c.argument('match_variable', arg_group="Match Condition",
                    help='Name of the match condition: '
-                        'https://docs.microsoft.com/en-us/azure/frontdoor/rules-match-conditions',
+                        'https://learn.microsoft.com/en-us/azure/frontdoor/rules-match-conditions',
                    arg_type=get_enum_type(DeliveryRuleCondition._subtype_map["name"].keys()))
     else:
         c.argument('match_variable', arg_group="Match Condition",
                    help='Name of the match condition: '
-                        'https://docs.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-match-conditions',
+                        'https://learn.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-match-conditions',
                    arg_type=get_enum_type(DeliveryRuleCondition._subtype_map["name"].keys()))
 
     c.argument('operator', arg_group="Match Condition", help='Operator of the match condition.')
@@ -139,7 +139,7 @@ def configure_rule_parameters(c, is_afdx):
         excldued_actions = ["UrlSigning", "CacheExpiration", "CacheKeyQueryString", "OriginGroupOverride"]
         c.argument('action_name', arg_group="Action",
                    help='The name of the action for the delivery rule: '
-                        'https://docs.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions',
+                        'https://learn.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions',
                    arg_type=get_enum_type([action for action in all_actions if action not in excldued_actions]))
 
         c.argument('cache_behavior', arg_group="Action",
@@ -175,7 +175,7 @@ def configure_rule_parameters(c, is_afdx):
         excldued_actions = ["RouteConfigurationOverride", "UrlSigning"]
         c.argument('action_name', arg_group="Action",
                    help='The name of the action for the delivery rule: '
-                        'https://docs.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-actions',
+                        'https://learn.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-actions',
                    arg_type=get_enum_type([action for action in all_actions if action not in excldued_actions]))
 
         # CacheExpirationAction parameters
diff --git a/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_afdx.py b/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_afdx.py
index c639e437349..b3c47e59fea 100644
--- a/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_afdx.py
+++ b/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_afdx.py
@@ -705,7 +705,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.action_name = AAZStrArg(
             options=['--action-name'],
             help='The name of the action for the delivery rule: '
-            'https://docs.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions.',
+            'https://learn.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions.',
         )
         args_schema.cache_behavior = AAZStrArg(
             options=['--cache-behavior'],
@@ -772,7 +772,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.match_variable = AAZStrArg(
             options=['--match-variable'],
             help='Name of the match condition: '
-            'https://docs.microsoft.com/en-us/azure/frontdoor/rules-match-conditions.',
+            'https://learn.microsoft.com/en-us/azure/frontdoor/rules-match-conditions.',
         )
         args_schema.negate_condition = AAZBoolArg(
             options=['--negate-condition'],
@@ -872,7 +872,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.match_variable = AAZStrArg(
             options=['--match-variable'],
             help='Name of the match condition: '
-            'https://docs.microsoft.com/en-us/azure/frontdoor/rules-match-conditions.',
+            'https://learn.microsoft.com/en-us/azure/frontdoor/rules-match-conditions.',
             required=True,
         )
         args_schema.negate_condition = AAZBoolArg(
@@ -952,7 +952,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.action_name = AAZStrArg(
             options=['--action-name'],
             help='The name of the action for the delivery rule: '
-            'https://docs.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions.',
+            'https://learn.microsoft.com/en-us/azure/frontdoor/front-door-rules-engine-actions.',
             required=True,
         )
         args_schema.cache_behavior = AAZStrArg(
diff --git a/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_cdn.py b/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_cdn.py
index d09f181b9df..2542b1a9eb1 100644
--- a/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_cdn.py
+++ b/src/azure-cli/azure/cli/command_modules/cdn/custom/custom_cdn.py
@@ -636,7 +636,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.action_name = AAZStrArg(
             options=['--action-name'],
             help='The name of the action for the delivery rule: '
-            'https://docs.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-actions.',
+            'https://learn.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-actions.',
             required=True
         )
         args_schema.order = AAZIntArg(
@@ -700,7 +700,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.match_variable = AAZStrArg(
             options=['--match-variable'],
             help='Name of the match condition: '
-            'https://docs.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-match-conditions.',
+            'https://learn.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-match-conditions.',
             enum=['ClientPort', 'Cookies', 'HostName', 'HttpVersion', 'IsDevice', 'PostArgs', 'QueryString',
                   'RemoteAddress', 'RequestBody', 'RequestHeader', 'RequestMethod', 'RequestScheme', 'RequestUri',
                   'ServerPort', 'SocketAddr', 'SslProtocol', 'UrlFileExtension', 'UrlFileName', 'UrlPath']
@@ -871,7 +871,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.action_name = AAZStrArg(
             options=['--action-name'],
             help='The name of the action for the delivery rule: '
-            'https://docs.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-actions.',
+            'https://learn.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-actions.',
             required=True
         )
         args_schema.cache_behavior = AAZStrArg(
@@ -1024,7 +1024,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         args_schema.match_variable = AAZStrArg(
             options=['--match-variable'],
             help='Name of the match condition: '
-            'https://docs.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-match-conditions.',
+            'https://learn.microsoft.com/en-us/azure/cdn/cdn-standard-rules-engine-match-conditions.',
             enum=['ClientPort', 'Cookies', 'HostName', 'HttpVersion', 'IsDevice', 'PostArgs', 'QueryString',
                   'RemoteAddress', 'RequestBody', 'RequestHeader', 'RequestMethod', 'RequestScheme', 'RequestUri',
                   'ServerPort', 'SocketAddr', 'SslProtocol', 'UrlFileExtension', 'UrlFileName', 'UrlPath'],
diff --git a/src/azure-cli/azure/cli/command_modules/cognitiveservices/_help.py b/src/azure-cli/azure/cli/command_modules/cognitiveservices/_help.py
index c2de8dd2dbf..d6c72bce99f 100644
--- a/src/azure-cli/azure/cli/command_modules/cognitiveservices/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/cognitiveservices/_help.py
@@ -10,19 +10,19 @@
 helps['cognitiveservices'] = """
 type: group
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 """
 
 helps['cognitiveservices account'] = """
 type: group
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 """
 
 helps['cognitiveservices account create'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 parameters:
   - name: --kind
     populator-commands:
@@ -60,7 +60,7 @@
 helps['cognitiveservices account delete'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Delete account.
     text: az cognitiveservices account delete --name myresource-luis -g cognitive-services-resource-group
@@ -69,13 +69,13 @@
 helps['cognitiveservices account keys'] = """
 type: group
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 """
 
 helps['cognitiveservices account keys list'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Get current resource keys.
     text: az cognitiveservices account keys list --name myresource -g cognitive-services-resource-group
@@ -87,7 +87,7 @@
 helps['cognitiveservices account keys regenerate'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Get new keys for resource.
     text: az cognitiveservices account keys regenerate --name myresource -g cognitive-services-resource-group --key-name key1
@@ -96,7 +96,7 @@
 helps['cognitiveservices account list'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: List all the Cognitive Services accounts in a resource group.
     text: az cognitiveservices account list -g MyResourceGroup
@@ -105,7 +105,7 @@
 helps['cognitiveservices account list-skus'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 parameters:
   - name: --name -n
     long-summary: |
@@ -125,7 +125,7 @@
 helps['cognitiveservices account list-models'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: List models available for a Cognitive Services account.
     text: az cognitiveservices account list-models -n myresource -g cognitive-services-resource-group
@@ -172,7 +172,7 @@
 helps['cognitiveservices account show'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show account information.
     text: az cognitiveservices account show --name myresource --resource-group cognitive-services-resource-group
@@ -181,7 +181,7 @@
 helps['cognitiveservices account update'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 parameters:
   - name: --sku --sku-name
     populator-commands:
@@ -194,7 +194,7 @@
 helps['cognitiveservices list'] = """
 type: command
 short-summary: Manage Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: List all the Cognitive Services accounts in a resource group.
     text: az cognitiveservices list -g MyResourceGroup
@@ -235,7 +235,7 @@
 helps['cognitiveservices account list-deleted'] = """
 type: command
 short-summary: List soft-deleted Azure Cognitive Services accounts.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: List all the Cognitive Services accounts in a subscription.
     text: az cognitiveservices account list-deleted
@@ -245,7 +245,7 @@
 helps['cognitiveservices account show-deleted'] = """
 type: command
 short-summary: Show a soft-deleted Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show a soft-deleted Azure Cognitive Services account.
     text: az cognitiveservices account show-deleted --location eastus --resource-group cognitive-services-resource-group --name cognitive-services-account-name
@@ -254,7 +254,7 @@
 helps['cognitiveservices account recover'] = """
 type: command
 short-summary: Recover a soft-deleted Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Recover a soft-deleted Azure Cognitive Services account.
     text: az cognitiveservices account recover --location eastus --resource-group cognitive-services-resource-group --name cognitive-services-account-name
@@ -263,7 +263,7 @@
 helps['cognitiveservices account purge'] = """
 type: command
 short-summary: Purge a soft-deleted Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Purge a soft-deleted Azure Cognitive Services account.
     text: az cognitiveservices account purge --location eastus --resource-group cognitive-services-resource-group --name cognitive-services-account-name
@@ -277,7 +277,7 @@
 helps['cognitiveservices account deployment create'] = """
 type: command
 short-summary: Create a deployment for Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Create a deployment for Azure Cognitive Services account.
     text: az cognitiveservices account deployment create -g yuanyang-test-sdk -n yytest-oai --deployment-name dpy --model-name ada --model-version "1" --model-format OpenAI --sku-capacity 1 --sku-name "Standard"
@@ -286,7 +286,7 @@
 helps['cognitiveservices account deployment delete'] = """
 type: command
 short-summary: Delete a deployment from Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Delete a deployment from Azure Cognitive Services account.
     text: az cognitiveservices account deployment delete -g yuanyang-test-sdk -n yytest-oai --deployment-name dpy
@@ -295,7 +295,7 @@
 helps['cognitiveservices account deployment show'] = """
 type: command
 short-summary: Show a deployment for Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show a deployment for Azure Cognitive Services account.
     text: az cognitiveservices account deployment show -g yuanyang-test-sdk -n yytest-oai --deployment-name dpy
@@ -304,7 +304,7 @@
 helps['cognitiveservices account deployment list'] = """
 type: command
 short-summary: Show all deployments for Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show all deployments for Azure Cognitive Services account.
     text: az cognitiveservices account deployment list -g yuanyang-test-sdk -n yytest-oai
@@ -318,7 +318,7 @@
 helps['cognitiveservices commitment-tier list'] = """
 type: command
 short-summary: Show all commitment tiers for Azure Cognitive Services.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show all commitment tiers for Azure Cognitive Services.
     text: az cognitiveservices commitment-tier list -l centraluseuap
@@ -332,7 +332,7 @@
 helps['cognitiveservices account commitment-plan create'] = """
 type: command
 short-summary: Create a commitment plan for Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Create a commitment plan for Azure Cognitive Services account.
     text: az cognitiveservices account commitment-plan create -g yuanyang-test-sdk -n yytest-ta --commitment-plan-name "plan" --hosting-model "Web" --plan-type "TA" --auto-renew false --current-tier "T1" --next-tier "T2"
@@ -341,7 +341,7 @@
 helps['cognitiveservices account commitment-plan delete'] = """
 type: command
 short-summary: Delete a commitment plan from Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Delete a commitment plan from Azure Cognitive Services account.
     text: az cognitiveservices account commitment-plan delete -g yuanyang-test-sdk -n yytest-ta --commitment-plan-name "plan"
@@ -350,7 +350,7 @@
 helps['cognitiveservices account commitment-plan show'] = """
 type: command
 short-summary: Show a commitment plan from Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show a commitment plan from Azure Cognitive Services account.
     text: az cognitiveservices account commitment-plan show -g yuanyang-test-sdk -n yytest-ta --commitment-plan-name "plan"
@@ -359,7 +359,7 @@
 helps['cognitiveservices account commitment-plan list'] = """
 type: command
 short-summary: Show all commitment plans from Azure Cognitive Services account.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show all commitment plans from Azure Cognitive Services account.
     text: az cognitiveservices account commitment-plan list -g yuanyang-test-sdk -n yytest-ta
@@ -373,7 +373,7 @@
 helps['cognitiveservices model list'] = """
 type: command
 short-summary: Show all models for Azure Cognitive Services.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show all models for Azure Cognitive Services.
     text: az cognitiveservices model list -l centraluseuap
@@ -387,7 +387,7 @@
 helps['cognitiveservices usage list'] = """
 type: command
 short-summary: Show all usages for Azure Cognitive Services.
-long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://docs.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
+long-summary: This article lists the Azure CLI commands for Azure Cognitive Services account and subscription management only. Refer to the documentation at https://learn.microsoft.com/azure/cognitive-services/ for individual services to learn how to use the APIs and supported SDKs.
 examples:
   - name: Show all usages for Azure Cognitive Services.
     text: az cognitiveservices usage list -l centraluseuap
diff --git a/src/azure-cli/azure/cli/command_modules/config/_help.py b/src/azure-cli/azure/cli/command_modules/config/_help.py
index 66a433a5253..b81afd07eb5 100644
--- a/src/azure-cli/azure/cli/command_modules/config/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/config/_help.py
@@ -16,7 +16,7 @@
 type: command
 short-summary: Set a configuration.
 long-summary: |
-    For available configuration options, see https://docs.microsoft.com/cli/azure/azure-cli-configuration.
+    For available configuration options, see https://learn.microsoft.com/cli/azure/azure-cli-configuration.
     By default without specifying --local, the configuration will be saved to `~/.azure/config`.
 examples:
   - name: Disable color with `core.no_color`.
diff --git a/src/azure-cli/azure/cli/command_modules/container/_vt_helper.py b/src/azure-cli/azure/cli/command_modules/container/_vt_helper.py
index 4a3e706dba8..d64d7a98447 100644
--- a/src/azure-cli/azure/cli/command_modules/container/_vt_helper.py
+++ b/src/azure-cli/azure/cli/command_modules/container/_vt_helper.py
@@ -26,8 +26,8 @@ def _check_zero(result, _, args):
 
 
 # See:
-# - https://docs.microsoft.com/windows/console/getconsolemode
-# - https://docs.microsoft.com/windows/console/setconsolemode
+# - https://learn.microsoft.com/windows/console/getconsolemode
+# - https://learn.microsoft.com/windows/console/setconsolemode
 kernel32 = WinDLL("kernel32", use_last_error=True)
 kernel32.GetConsoleMode.errcheck = _check_zero
 kernel32.GetConsoleMode.argtypes = (HANDLE, LPDWORD)
diff --git a/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/_create.py
index 0c4e92e8305..4afa12a6972 100644
--- a/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/_create.py
@@ -14,7 +14,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/container/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/container/tests/latest/test_container_commands.py b/src/azure-cli/azure/cli/command_modules/container/tests/latest/test_container_commands.py
index 71b8289f7f1..47cfe24b309 100644
--- a/src/azure-cli/azure/cli/command_modules/container/tests/latest/test_container_commands.py
+++ b/src/azure-cli/azure/cli/command_modules/container/tests/latest/test_container_commands.py
@@ -400,7 +400,7 @@ def test_container_create_with_msi_scope(self, resource_group, resource_group_lo
 
     # Test create container with azure container registry image.
     # An ACR instance is required to re-record this test with 'nginx:latest' image available in the url.
-    # see https://docs.microsoft.com/azure/container-registry/container-registry-get-started-docker-cli
+    # see https://learn.microsoft.com/azure/container-registry/container-registry-get-started-docker-cli
     # After recording, regenerate the password for the acr instance.
     @record_only()  # This test relies on existing ACR image
     @ResourceGroupPreparer()
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/_compose_utils.py b/src/azure-cli/azure/cli/command_modules/containerapp/_compose_utils.py
index d464ed3855c..48d92c3c81f 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/_compose_utils.py
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/_compose_utils.py
@@ -270,7 +270,7 @@ def resolve_replicas_from_service(service):
 
 def valid_resource_settings():
     # vCPU and Memory reservations
-    # https://docs.microsoft.com/azure/container-apps/containers#configuration
+    # https://learn.microsoft.com/azure/container-apps/containers#configuration
     return {
         "0.25": "0.5",
         "0.5": "1.0",
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/_params.py b/src/azure-cli/azure/cli/command_modules/containerapp/_params.py
index a6063a7ebd2..bb9da163cd7 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/_params.py
@@ -32,7 +32,7 @@ def load_arguments(self, _):
     with self.argument_context('containerapp') as c:
         c.argument('tags', arg_type=tags_type)
         c.argument('managed_env', validator=validate_managed_env_name_or_id, options_list=['--environment'], help="Name or resource ID of the container app's environment.")
-        c.argument('yaml', type=file_type, help='Path to a .yaml file with the configuration of a container app. All other parameters will be ignored. For an example, see  https://docs.microsoft.com/azure/container-apps/azure-resource-manager-api-spec#examples')
+        c.argument('yaml', type=file_type, help='Path to a .yaml file with the configuration of a container app. All other parameters will be ignored. For an example, see  https://learn.microsoft.com/azure/container-apps/azure-resource-manager-api-spec#examples')
 
     with self.argument_context('containerapp exec') as c:
         c.argument('container', help="The name of the container to ssh into")
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/_utils.py b/src/azure-cli/azure/cli/command_modules/containerapp/_utils.py
index 22ea0ab0cc8..94d9980f5c0 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/_utils.py
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/_utils.py
@@ -102,7 +102,7 @@ def _create_application(client, display_name):
         result = client.application_create(body)
     except GraphError as ex:
         if 'insufficient privileges' in str(ex).lower():
-            link = 'https://docs.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal'  # pylint: disable=line-too-long
+            link = 'https://learn.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal'  # pylint: disable=line-too-long
             raise ValidationError("Directory permission is needed for the current user to register the application. "
                                   "For how to configure, please refer '{}'. Original error: {}".format(link, ex)) from ex
         raise
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/containerapp/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Index.cshtml b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Index.cshtml
index ec9fe935e15..755d780f603 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Index.cshtml
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Index.cshtml
@@ -6,5 +6,5 @@
 
 <div class="text-center">
     <h1 class="display-4">Hello, world!</h1>
-    <p>Learn about <a href="https://docs.microsoft.com/aspnet/core">building Web apps with ASP.NET Core</a>.</p>
+    <p>Learn about <a href="https://learn.microsoft.com/aspnet/core">building Web apps with ASP.NET Core</a>.</p>
 </div>
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Shared/_Layout.cshtml.css b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Shared/_Layout.cshtml.css
index a72cbeaf337..c187c02e050 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Shared/_Layout.cshtml.css
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/Pages/Shared/_Layout.cshtml.css
@@ -1,4 +1,4 @@
-/* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
+/* Please see documentation at https://learn.microsoft.com/aspnet/core/client-side/bundling-and-minification
 for details on configuring this project to bundle and minify static web assets. */
 
 a.navbar-brand {
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/wwwroot/js/site.js b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/wwwroot/js/site.js
index ac49c186418..09376573536 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/wwwroot/js/site.js
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_buildpack/wwwroot/js/site.js
@@ -1,4 +1,4 @@
-// Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
+// Please see documentation at https://learn.microsoft.com/aspnet/core/client-side/bundling-and-minification
 // for details on configuring this project to bundle and minify static web assets.
 
 // Write your JavaScript code.
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Index.cshtml b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Index.cshtml
index b5f0c15fced..f9ff8d424a1 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Index.cshtml
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Index.cshtml
@@ -6,5 +6,5 @@
 
 <div class="text-center">
     <h1 class="display-4">Welcome</h1>
-    <p>Learn about <a href="https://docs.microsoft.com/aspnet/core">building Web apps with ASP.NET Core</a>.</p>
+    <p>Learn about <a href="https://learn.microsoft.com/aspnet/core">building Web apps with ASP.NET Core</a>.</p>
 </div>
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Shared/_Layout.cshtml.css b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Shared/_Layout.cshtml.css
index a72cbeaf337..c187c02e050 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Shared/_Layout.cshtml.css
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/Pages/Shared/_Layout.cshtml.css
@@ -1,4 +1,4 @@
-/* Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
+/* Please see documentation at https://learn.microsoft.com/aspnet/core/client-side/bundling-and-minification
 for details on configuring this project to bundle and minify static web assets. */
 
 a.navbar-brand {
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/wwwroot/js/site.js b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/wwwroot/js/site.js
index ac49c186418..09376573536 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/wwwroot/js/site.js
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/data/source_built_using_dockerfile/wwwroot/js/site.js
@@ -1,4 +1,4 @@
-// Please see documentation at https://docs.microsoft.com/aspnet/core/client-side/bundling-and-minification
+// Please see documentation at https://learn.microsoft.com/aspnet/core/client-side/bundling-and-minification
 // for details on configuring this project to bundle and minify static web assets.
 
 // Write your JavaScript code.
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_buildpack_e2e.yaml b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_buildpack_e2e.yaml
index 5b0b311c698..4722ed7ff49 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_buildpack_e2e.yaml
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_buildpack_e2e.yaml
@@ -163777,7 +163777,7 @@ interactions:
         \       </nav>\r\n    </header>\r\n    <div b-j8uc5gw69c class=\"container\">\r\n
         \       <main b-j8uc5gw69c role=\"main\" class=\"pb-3\">\r\n            \r\n<div
         class=\"text-center\">\r\n    <h1 class=\"display-4\">Hello, world!</h1>\r\n
-        \   <p>Learn about <a href=\"https://docs.microsoft.com/aspnet/core\">building
+        \   <p>Learn about <a href=\"https://learn.microsoft.com/aspnet/core\">building
         Web apps with ASP.NET Core</a>.</p>\r\n</div>\r\n\r\n        </main>\r\n    </div>\r\n\r\n
         \   <footer b-j8uc5gw69c class=\"border-top footer text-muted\">\r\n        <div
         b-j8uc5gw69c class=\"container\">\r\n            &copy; 2023 - HelloWorldApp
diff --git a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_dockerfile_e2e.yaml b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_dockerfile_e2e.yaml
index c60abcf528c..3614e55f98b 100644
--- a/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_dockerfile_e2e.yaml
+++ b/src/azure-cli/azure/cli/command_modules/containerapp/tests/latest/recordings/test_containerapp_up_source_with_dockerfile_e2e.yaml
@@ -9016,7 +9016,7 @@ interactions:
         \       </nav>\r\n    </header>\r\n    <div b-mbsabs3mld class=\"container\">\r\n
         \       <main b-mbsabs3mld role=\"main\" class=\"pb-3\">\r\n            \r\n<div
         class=\"text-center\">\r\n    <h1 class=\"display-4\">Welcome</h1>\r\n    <p>Learn
-        about <a href=\"https://docs.microsoft.com/aspnet/core\">building Web apps
+        about <a href=\"https://learn.microsoft.com/aspnet/core\">building Web apps
         with ASP.NET Core</a>.</p>\r\n</div>\r\n\r\n        </main>\r\n    </div>\r\n\r\n
         \   <footer b-mbsabs3mld class=\"border-top footer text-muted\">\r\n        <div
         b-mbsabs3mld class=\"container\">\r\n            &copy; 2023 - TestWebApp202305
diff --git a/src/azure-cli/azure/cli/command_modules/feedback/tests/latest/test_feedback.py b/src/azure-cli/azure/cli/command_modules/feedback/tests/latest/test_feedback.py
index f712a0a84ef..c09203b4541 100644
--- a/src/azure-cli/azure/cli/command_modules/feedback/tests/latest/test_feedback.py
+++ b/src/azure-cli/azure/cli/command_modules/feedback/tests/latest/test_feedback.py
@@ -80,7 +80,7 @@ def _helper_test_is_valid_github_project_url(self):
         self.assertTrue(_is_valid_github_project_url('https://github.com/azure/devops-extension'))
         self.assertFalse(_is_valid_github_project_url('https://github.com/'))
         self.assertFalse(_is_valid_github_project_url('https://github.com/Azure/azure-cli-extensions/tree/master/src/vm-repair'))
-        self.assertFalse(_is_valid_github_project_url('https://docs.microsoft.com/azure/machine-learning/service/'))
+        self.assertFalse(_is_valid_github_project_url('https://learn.microsoft.com/azure/machine-learning/service/'))
 
     def _helper_test_get_repository_url_pretty(self):
         # default behaviour is pretty url
diff --git a/src/azure-cli/azure/cli/command_modules/hdinsight/_help.py b/src/azure-cli/azure/cli/command_modules/hdinsight/_help.py
index 49b26773a88..fc4d84fe714 100644
--- a/src/azure-cli/azure/cli/command_modules/hdinsight/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/hdinsight/_help.py
@@ -97,7 +97,7 @@
         --assign-identity "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/MyMsiRG/providers/Microsoft.ManagedIdentity/userAssignedIdentities/MyMSI" \\
         --cluster-admin-account MyAdminAccount@MyDomain.onmicrosoft.com \\
         --cluster-users-group-dns MyGroup
-  - name: Create a Kafka cluster with disk encryption. See https://docs.microsoft.com/azure/hdinsight/kafka/apache-kafka-byok.
+  - name: Create a Kafka cluster with disk encryption. See https://learn.microsoft.com/azure/hdinsight/kafka/apache-kafka-byok.
     text: |-
         az hdinsight create -t kafka -g MyResourceGroup -n MyCluster \\
         -p "HttpPassword1234!" --workernode-data-disks-per-node 2 \\
diff --git a/src/azure-cli/azure/cli/command_modules/hdinsight/_params.py b/src/azure-cli/azure/cli/command_modules/hdinsight/_params.py
index 805db8ffb40..3e6174f38d4 100644
--- a/src/azure-cli/azure/cli/command_modules/hdinsight/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/hdinsight/_params.py
@@ -34,7 +34,7 @@ def load_arguments(self, _):
     from azure.mgmt.hdinsight.models import ResourceProviderConnection, OutboundDependenciesManagedType
     from argcomplete.completers import FilesCompleter
     node_size_type = CLIArgumentType(arg_group='Node',
-                                     help='The size of the node. See also: https://docs.microsoft.com/azure/'
+                                     help='The size of the node. See also: https://learn.microsoft.com/azure/'
                                           'hdinsight/hdinsight-hadoop-provision-linux-clusters#configure-cluster-size')
 
     # cluster
@@ -48,25 +48,25 @@ def load_arguments(self, _):
                    help='Permit timeout error during argument validation phase. If omitted, '
                         'validation timeout error will be permitted.')
         c.argument('cluster_version', options_list=['--version', '-v'], arg_group='Cluster',
-                   help='The HDInsight cluster version. See also: https://docs.microsoft.com/azure/'
+                   help='The HDInsight cluster version. See also: https://learn.microsoft.com/azure/'
                         'hdinsight/hdinsight-component-versioning#supported-hdinsight-versions')
         c.argument('cluster_type', options_list=['--type', '-t'], arg_group='Cluster',
                    completer=get_generic_completion_list(known_cluster_types),
                    help='Type of HDInsight cluster, like: {}. '
-                        'See also: https://docs.microsoft.com/azure/hdinsight/hdinsight-'
+                        'See also: https://learn.microsoft.com/azure/hdinsight/hdinsight-'
                         'hadoop-provision-linux-clusters#cluster-types'.format(', '.join(known_cluster_types)))
         c.argument('component_version', arg_group='Cluster', nargs='*', validator=validate_component_version,
                    help='The versions of various Hadoop components, in space-'
                         'separated versions in \'component=version\' format. Example: '
                         'Spark=2.0 Hadoop=2.7.3 '
-                        'See also: https://docs.microsoft.com/azure/hdinsight/hdinsight'
+                        'See also: https://learn.microsoft.com/azure/hdinsight/hdinsight'
                         '-component-versioning#hadoop-components-available-with-different-'
                         'hdinsight-versions')
         c.argument('cluster_configurations', arg_group='Cluster', type=shell_safe_json_parse,
                    completer=FilesCompleter(),
                    help='Extra configurations of various components. '
                         'Configurations may be supplied from a file using the `@{path}` syntax or a JSON string. '
-                        'See also: https://docs.microsoft.com/azure/hdinsight/'
+                        'See also: https://learn.microsoft.com/azure/hdinsight/'
                         'hdinsight-hadoop-customize-cluster-bootstrap')
         c.argument('cluster_tier', arg_type=get_enum_type(Tier), arg_group='Cluster',
                    help='The tier of the cluster')
@@ -95,10 +95,10 @@ def load_arguments(self, _):
 
         # Node
         c.argument('headnode_size', arg_type=node_size_type,
-                   help='The size of the node. See also: https://docs.microsoft.com/azure/'
+                   help='The size of the node. See also: https://learn.microsoft.com/azure/'
                         'hdinsight/hdinsight-hadoop-provision-linux-clusters#configure-cluster-size')
         c.argument('workernode_size', arg_type=node_size_type,
-                   help='The size of the node. See also: https://docs.microsoft.com/azure/'
+                   help='The size of the node. See also: https://learn.microsoft.com/azure/'
                         'hdinsight/hdinsight-hadoop-provision-linux-clusters#configure-cluster-size')
         c.argument('workernode_data_disks_per_node', arg_group='Node',
                    help='The number of data disks to use per worker node.')
diff --git a/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/hdinsight/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/iot/_constants.py b/src/azure-cli/azure/cli/command_modules/iot/_constants.py
index 966b8662512..e4f34084d09 100644
--- a/src/azure-cli/azure/cli/command_modules/iot/_constants.py
+++ b/src/azure-cli/azure/cli/command_modules/iot/_constants.py
@@ -4,5 +4,5 @@
 # --------------------------------------------------------------------------------------------
 
 certificate_help = """For a detailed explanation of CA certificates in Azure IoT Hub,
-                      see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview """
+                      see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview """
 SYSTEM_ASSIGNED_IDENTITY = '[system]'
diff --git a/src/azure-cli/azure/cli/command_modules/iot/_help.py b/src/azure-cli/azure/cli/command_modules/iot/_help.py
index 5d5761a52ab..3f7319a284b 100644
--- a/src/azure-cli/azure/cli/command_modules/iot/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/iot/_help.py
@@ -153,7 +153,7 @@
 helps['iot dps create'] = """
 type: command
 short-summary: Create an Azure IoT Hub Device Provisioning Service instance.
-long-summary: For an introduction to Azure IoT Hub Device Provisioning Service, see https://docs.microsoft.com/azure/iot-dps/about-iot-dps
+long-summary: For an introduction to Azure IoT Hub Device Provisioning Service, see https://learn.microsoft.com/azure/iot-dps/about-iot-dps
 examples:
   - name: Create an Azure IoT Hub Device Provisioning Service with the standard pricing tier S1, in the region of the resource group.
     text: >
@@ -271,7 +271,7 @@
 helps['iot hub certificate create'] = """
 type: command
 short-summary: Create/upload an Azure IoT Hub certificate.
-long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: Uploads a verified CA certificate PEM file to an IoT hub.
     text: >
@@ -287,7 +287,7 @@
 helps['iot hub certificate delete'] = """
 type: command
 short-summary: Deletes an Azure IoT Hub certificate.
-long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: Deletes MyCertificate
     text: >
@@ -297,7 +297,7 @@
 helps['iot hub certificate generate-verification-code'] = """
 type: command
 short-summary: Generates a verification code for an Azure IoT Hub certificate.
-long-summary: This verification code is used to complete the proof of possession step for a certificate. Use this verification code as the CN of a new certificate signed with the root certificates private key. For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: This verification code is used to complete the proof of possession step for a certificate. Use this verification code as the CN of a new certificate signed with the root certificates private key. For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: Generates a verification code for MyCertificate
     text: >
@@ -310,7 +310,7 @@
 helps['iot hub certificate list'] = """
 type: command
 short-summary: Lists all certificates contained within an Azure IoT Hub
-long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: List all certificates in MyIotHub
     text: >
@@ -320,7 +320,7 @@
 helps['iot hub certificate show'] = """
 type: command
 short-summary: Shows information about a particular Azure IoT Hub certificate.
-long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: Show details about MyCertificate
     text: >
@@ -333,7 +333,7 @@
 helps['iot hub certificate update'] = """
 type: command
 short-summary: Update an Azure IoT Hub certificate.
-long-summary: Uploads a new certificate to replace the existing certificate with the same name. For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: Uploads a new certificate to replace the existing certificate with the same name. For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: Updates a CA certificate in an IoT hub by uploading a new PEM file.
     text: >
@@ -346,7 +346,7 @@
 helps['iot hub certificate verify'] = """
 type: command
 short-summary: Verifies an Azure IoT Hub certificate.
-long-summary: Verifies a certificate by uploading a verification certificate containing the verification code obtained by calling generate-verification-code. This is the last step in the proof of possession process. For a detailed explanation of CA certificates in Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
+long-summary: Verifies a certificate by uploading a verification certificate containing the verification code obtained by calling generate-verification-code. This is the last step in the proof of possession process. For a detailed explanation of CA certificates in Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/iot-hub-x509ca-overview
 examples:
   - name: Verifies ownership of the MyCertificate private key.
     text: >
@@ -399,7 +399,7 @@
 helps['iot hub create'] = """
 type: command
 short-summary: Create an Azure IoT hub.
-long-summary: For an introduction to Azure IoT Hub, see https://docs.microsoft.com/azure/iot-hub/
+long-summary: For an introduction to Azure IoT Hub, see https://learn.microsoft.com/azure/iot-hub/
 examples:
   - name: Create an IoT Hub with the free pricing tier F1, in the region of the resource group.
     text: >
diff --git a/src/azure-cli/azure/cli/command_modules/keyvault/_help.py b/src/azure-cli/azure/cli/command_modules/keyvault/_help.py
index 2ab162d2fc0..7875c681487 100644
--- a/src/azure-cli/azure/cli/command_modules/keyvault/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/keyvault/_help.py
@@ -137,7 +137,7 @@
     This default policy can be used in conjunction with `az keyvault create` to create a self-signed certificate.
     The default policy can also be used as a starting point to create derivative policies.
 
-    For more details, see: https://docs.microsoft.com/azure/key-vault/certificates/about-certificates#certificate-policy
+    For more details, see: https://learn.microsoft.com/azure/key-vault/certificates/about-certificates#certificate-policy
 examples:
   - name: Create a self-signed certificate with the default policy
     text: |
diff --git a/src/azure-cli/azure/cli/command_modules/keyvault/_params.py b/src/azure-cli/azure/cli/command_modules/keyvault/_params.py
index a0a5a532de8..271458d6c39 100644
--- a/src/azure-cli/azure/cli/command_modules/keyvault/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/keyvault/_params.py
@@ -351,9 +351,9 @@ class CLISecurityDomainOperation(str, Enum):
 
     with self.argument_context('keyvault key create') as c:
         c.argument('kty', arg_type=get_enum_type(JsonWebKeyType), validator=validate_key_type,
-                   help='The type of key to create. For valid values, see: https://docs.microsoft.com/rest/api/keyvault/keys/create-key/create-key#jsonwebkeytype')
+                   help='The type of key to create. For valid values, see: https://learn.microsoft.com/rest/api/keyvault/keys/create-key/create-key#jsonwebkeytype')
         c.argument('curve', arg_type=get_enum_type(KeyCurveName),
-                   help='Elliptic curve name. For valid values, see: https://docs.microsoft.com/rest/api/keyvault/keys/create-key/create-key#jsonwebkeycurvename')
+                   help='Elliptic curve name. For valid values, see: https://learn.microsoft.com/rest/api/keyvault/keys/create-key/create-key#jsonwebkeycurvename')
 
     with self.argument_context('keyvault key import') as c:
         c.argument('kty', arg_type=get_enum_type(CLIKeyTypeForBYOKImport), validator=validate_key_import_type,
diff --git a/src/azure-cli/azure/cli/command_modules/keyvault/_validators.py b/src/azure-cli/azure/cli/command_modules/keyvault/_validators.py
index da107943b72..f3c742ed0a4 100644
--- a/src/azure-cli/azure/cli/command_modules/keyvault/_validators.py
+++ b/src/azure-cli/azure/cli/command_modules/keyvault/_validators.py
@@ -585,14 +585,14 @@ def _show_vault_only_deprecate_message(ns):
                        'Warning! If you have soft-delete protection enabled on this key vault, you will '
                        'not be able to reuse this key vault name until the key vault has been purged from '
                        'the soft deleted state. Please see the following documentation for additional '
-                       'guidance.\nhttps://docs.microsoft.com/azure/key-vault/general/soft-delete-overview'),
+                       'guidance.\nhttps://learn.microsoft.com/azure/key-vault/general/soft-delete-overview'),
         'keyvault key delete':
             Deprecated(ns.cmd.cli_ctx, message_func=lambda x:
                        'Warning! If you have soft-delete protection enabled on this key vault, this key '
                        'will be moved to the soft deleted state. You will not be able to create a key with '
                        'the same name within this key vault until the key has been purged from the '
                        'soft-deleted state. Please see the following documentation for additional '
-                       'guidance.\nhttps://docs.microsoft.com/azure/key-vault/general/soft-delete-overview')
+                       'guidance.\nhttps://learn.microsoft.com/azure/key-vault/general/soft-delete-overview')
     }
     cmds = ['keyvault delete', 'keyvault key delete']
     for cmd in cmds:
diff --git a/src/azure-cli/azure/cli/command_modules/keyvault/commands.py b/src/azure-cli/azure/cli/command_modules/keyvault/commands.py
index 2870b662075..b1ad7e091bb 100644
--- a/src/azure-cli/azure/cli/command_modules/keyvault/commands.py
+++ b/src/azure-cli/azure/cli/command_modules/keyvault/commands.py
@@ -210,7 +210,7 @@ def load_command_table(self, _):
                                'will be moved to the soft deleted state. You will not be able to create a secret '
                                'with the same name within this key vault until the secret has been purged from the '
                                'soft-deleted state. Please see the following documentation for additional guidance.'
-                               '\nhttps://docs.microsoft.com/azure/key-vault/general/soft-delete-overview'))
+                               '\nhttps://learn.microsoft.com/azure/key-vault/general/soft-delete-overview'))
         g.keyvault_command('purge', 'purge_deleted_secret')
         g.keyvault_command('recover', 'begin_recover_deleted_secret', transform=transform_secret_recover)
         g.keyvault_custom('download', 'download_secret')
@@ -241,7 +241,7 @@ def load_command_table(self, _):
                                    'create a certificate with the same name within this key vault until the '
                                    'certificate has been purged from the soft-deleted state. Please see the following '
                                    'documentation for additional guidance.\n'
-                                   'https://docs.microsoft.com/azure/key-vault/general/soft-delete-overview'),
+                                   'https://learn.microsoft.com/azure/key-vault/general/soft-delete-overview'),
                            transform=transform_certificate_delete)
         g.keyvault_command('purge', 'purge_deleted_certificate')
         g.keyvault_command('recover', 'begin_recover_deleted_certificate', transform=transform_certificate_recover)
diff --git a/src/azure-cli/azure/cli/command_modules/lab/tests/latest/recordings/test_lab_retrieve_commands.yaml b/src/azure-cli/azure/cli/command_modules/lab/tests/latest/recordings/test_lab_retrieve_commands.yaml
index dddda627521..dfffbe3fc78 100644
--- a/src/azure-cli/azure/cli/command_modules/lab/tests/latest/recordings/test_lab_retrieve_commands.yaml
+++ b/src/azure-cli/azure/cli/command_modules/lab/tests/latest/recordings/test_lab_retrieve_commands.yaml
@@ -418,16 +418,16 @@ interactions:
         in PowerShell to get the list."}},"enableAutomaticUpdates":{"type":"bool","defaultValue":true,"metadata":{"description":"Enable
         automatic Windows Updates."}},"enableHybridBenefitServerLicenses":{"type":"bool","defaultValue":false,"metadata":{"description":"Enable
         Azure Hybrid Benefit to use your on-premises Windows Server licenses and reduce
-        cost. See https://docs.microsoft.com/en-us/azure/virtual-machines/windows/hybrid-use-benefit-licensing
+        cost. See https://learn.microsoft.com/en-us/azure/virtual-machines/windows/hybrid-use-benefit-licensing
         for more information."}},"vmDCSize":{"type":"string","defaultValue":"Standard_B2s","metadata":{"description":"Size
         of the DC VM"}},"vmDCStorageAccountType":{"type":"string","defaultValue":"StandardSSD_LRS","allowedValues":["Standard_LRS","StandardSSD_LRS","Premium_LRS","Premium_ZRS","StandardSSD_ZRS","UltraSSD_LRS"],"metadata":{"description":"Type
-        of storage for the managed disks. Visit ''https://docs.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
+        of storage for the managed disks. Visit ''https://learn.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
         for more information"}},"vmSQLSize":{"type":"string","defaultValue":"Standard_B2ms","metadata":{"description":"Size
         of the SQL VM"}},"vmSQLStorageAccountType":{"type":"string","defaultValue":"StandardSSD_LRS","allowedValues":["Standard_LRS","StandardSSD_LRS","Premium_LRS","Premium_ZRS","StandardSSD_ZRS","UltraSSD_LRS"],"metadata":{"description":"Type
-        of storage for the managed disks. Visit ''https://docs.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
+        of storage for the managed disks. Visit ''https://learn.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
         for more information"}},"vmSPSize":{"type":"string","defaultValue":"Standard_B4ms","metadata":{"description":"Size
         of the SharePoint VM"}},"vmSPStorageAccountType":{"type":"string","defaultValue":"StandardSSD_LRS","allowedValues":["Standard_LRS","StandardSSD_LRS","Premium_LRS","Premium_ZRS","StandardSSD_ZRS","UltraSSD_LRS"],"metadata":{"description":"Type
-        of storage for the managed disks. Visit ''https://docs.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
+        of storage for the managed disks. Visit ''https://learn.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
         for more information"}},"_artifactsLocation":{"type":"string","defaultValue":"https://github.com/Azure/azure-devtestlab/raw/master/Environments/SharePoint-AllVersions","metadata":{"description":"The
         base URI where artifacts required by this template are located. When the template
         is deployed using the accompanying scripts, a private location in the subscription
@@ -668,16 +668,16 @@ interactions:
         in PowerShell to get the list."}},"enableAutomaticUpdates":{"type":"bool","defaultValue":true,"metadata":{"description":"Enable
         automatic Windows Updates."}},"enableHybridBenefitServerLicenses":{"type":"bool","defaultValue":false,"metadata":{"description":"Enable
         Azure Hybrid Benefit to use your on-premises Windows Server licenses and reduce
-        cost. See https://docs.microsoft.com/en-us/azure/virtual-machines/windows/hybrid-use-benefit-licensing
+        cost. See https://learn.microsoft.com/en-us/azure/virtual-machines/windows/hybrid-use-benefit-licensing
         for more information."}},"vmDCSize":{"type":"string","defaultValue":"Standard_B2s","metadata":{"description":"Size
         of the DC VM"}},"vmDCStorageAccountType":{"type":"string","defaultValue":"StandardSSD_LRS","allowedValues":["Standard_LRS","StandardSSD_LRS","Premium_LRS","Premium_ZRS","StandardSSD_ZRS","UltraSSD_LRS"],"metadata":{"description":"Type
-        of storage for the managed disks. Visit ''https://docs.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
+        of storage for the managed disks. Visit ''https://learn.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
         for more information"}},"vmSQLSize":{"type":"string","defaultValue":"Standard_B2ms","metadata":{"description":"Size
         of the SQL VM"}},"vmSQLStorageAccountType":{"type":"string","defaultValue":"StandardSSD_LRS","allowedValues":["Standard_LRS","StandardSSD_LRS","Premium_LRS","Premium_ZRS","StandardSSD_ZRS","UltraSSD_LRS"],"metadata":{"description":"Type
-        of storage for the managed disks. Visit ''https://docs.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
+        of storage for the managed disks. Visit ''https://learn.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
         for more information"}},"vmSPSize":{"type":"string","defaultValue":"Standard_B4ms","metadata":{"description":"Size
         of the SharePoint VM"}},"vmSPStorageAccountType":{"type":"string","defaultValue":"StandardSSD_LRS","allowedValues":["Standard_LRS","StandardSSD_LRS","Premium_LRS","Premium_ZRS","StandardSSD_ZRS","UltraSSD_LRS"],"metadata":{"description":"Type
-        of storage for the managed disks. Visit ''https://docs.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
+        of storage for the managed disks. Visit ''https://learn.microsoft.com/en-us/rest/api/compute/disks/list#diskstorageaccounttypes''
         for more information"}},"_artifactsLocation":{"type":"string","defaultValue":"https://github.com/Azure/azure-devtestlab/raw/master/Environments/SharePoint-SingleFarm-FullConfig","metadata":{"description":"The
         base URI where artifacts required by this template are located. When the template
         is deployed using the accompanying scripts, a private location in the subscription
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/_help.py b/src/azure-cli/azure/cli/command_modules/monitor/_help.py
index ddd0be67473..f406f948fe0 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/_help.py
@@ -80,14 +80,14 @@
 type: group
 short-summary: Manage autoscale settings.
 long-summary: >
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
 """
 
 helps['monitor autoscale create'] = """
 type: command
 short-summary: Create new autoscale settings.
 long-summary: >
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
 parameters:
   - name: --action -a
     short-summary: Add an action to fire when a scaling event occurs.
@@ -121,14 +121,14 @@
 type: group
 short-summary: Manage autoscaling profiles.
 long-summary: >
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
 """
 
 helps['monitor autoscale profile create'] = """
 type: command
 short-summary: Create a fixed or recurring autoscale profile.
 long-summary: >
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
 parameters:
   - name: --timezone
     short-summary: Timezone name.
@@ -222,7 +222,7 @@
 type: group
 short-summary: Manage autoscale scaling rules.
 long-summary: >
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
 """
 
 helps['monitor autoscale rule copy'] = """
@@ -234,7 +234,7 @@
 type: command
 short-summary: Add a new autoscale rule.
 long-summary: >
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings
 parameters:
   - name: --condition
     short-summary: The condition which triggers the scaling action.
@@ -536,7 +536,7 @@
         The interval over which to aggregate metrics, in ##h##m format.
   - name: --filter
     short-summary: A string used to reduce the set of metric data returned. eg. "BlobType eq '*'"
-    long-summary: 'For a full list of filters, see the filter string reference at https://docs.microsoft.com/rest/api/monitor/metrics/list'
+    long-summary: 'For a full list of filters, see the filter string reference at https://learn.microsoft.com/rest/api/monitor/metrics/list'
   - name: --metadata
     short-summary: Returns the metadata values instead of metric data
   - name: --dimension
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/_params.py b/src/azure-cli/azure/cli/command_modules/monitor/_params.py
index 50de2c421b2..55c96687f45 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/_params.py
@@ -324,7 +324,7 @@ def load_arguments(self, _):
                    help="The optional function parameters if query serves as a function. "
                         "Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. "
                         "For more examples and proper syntax please refer to "
-                        "https://docs.microsoft.com/azure/kusto/query/functions/user-defined-functions.")
+                        "https://learn.microsoft.com/azure/kusto/query/functions/user-defined-functions.")
         c.argument('tags', tags_type)
     # endregion
 
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_create.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_create.py
index 90d4e86f744..cae05d0530d 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_create.py
@@ -14,7 +14,7 @@
 class Create(AAZCommand):
     """Create an autoscale setting.
 
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings.
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings.
 
     :example: Create autoscale settings to scale between 2 and 5 instances (3 as default). Email the administrator when scaling occurs.
         az monitor autoscale create -g myrg --resource resource-id --min-count 2 --max-count 5 --count 3 --email-administrator
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_update.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_update.py
index 441897c13d0..cc7580abf6e 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_update.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/autoscale/_update.py
@@ -17,7 +17,7 @@
 class Update(AAZCommand):
     """Update an autoscale setting.
 
-    For more information on autoscaling, visit: https://docs.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings.
+    For more information on autoscaling, visit: https://learn.microsoft.com/azure/monitoring-and-diagnostics/monitoring-understanding-autoscale-settings.
 
     :example: Update autoscale settings to use a fixed 3 instances by default.
         az monitor autoscale update -g myrg -n autoscale-name --count 3
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/diagnostic_settings/_create.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/diagnostic_settings/_create.py
index 97ecee0e2bb..b52faaccbdf 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/diagnostic_settings/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/diagnostic_settings/_create.py
@@ -15,7 +15,7 @@
     "monitor diagnostic-settings create",
 )
 class Create(AAZCommand):
-    """Create diagnostic settings for the specified resource. For more information, visit: https://docs.microsoft.com/rest/api/monitor/diagnosticsettings/createorupdate#metricsettings.
+    """Create diagnostic settings for the specified resource. For more information, visit: https://learn.microsoft.com/rest/api/monitor/diagnosticsettings/createorupdate#metricsettings.
 
     :example: Create diagnostic settings, retention here only applies when the target is a storage account.
         az monitor diagnostic-settings create --resource {ID} -n {name} --storage-account {storageAccount} --logs "[{category:WorkflowRuntime,enabled:true,retention-policy:{enabled:false,days:0}}]" --metrics "[{category:WorkflowRuntime,enabled:true,retention-policy:{enabled:false,days:0}}]"
@@ -63,7 +63,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         )
         _args_schema.logs = AAZListArg(
             options=["--logs"],
-            help="JSON encoded list of logs settings. Use '@{file}' to load from a file.For more information, visit: https://docs.microsoft.com/rest/api/monitor/diagnosticsettings/createorupdate#logsettings.",
+            help="JSON encoded list of logs settings. Use '@{file}' to load from a file.For more information, visit: https://learn.microsoft.com/rest/api/monitor/diagnosticsettings/createorupdate#logsettings.",
         )
         _args_schema.marketplace_partner_id = AAZStrArg(
             options=["--marketplace-partner-id"],
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/_get_schema.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/_get_schema.py
index 590c5f3d7c2..5a03829e992 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/_get_schema.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/_get_schema.py
@@ -18,7 +18,7 @@ class GetSchema(AAZCommand):
     """Get the schema for a given workspace.
 
     Schema represents the internal structure of the workspace, which can be used during the query.
-    For more information, visit: https://docs.microsoft.com/en-us/rest/api/loganalytics/workspace-schema/get
+    For more information, visit: https://learn.microsoft.com/en-us/rest/api/loganalytics/workspace-schema/get
 
     :example: Get the schema for a given workspace.
         az monitor log-analytics workspace get-schema --resource-group MyResourceGroup --workspace-name MyWorkspace
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_create.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_create.py
index 7455275b1f4..d4410374b39 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_create.py
@@ -18,7 +18,7 @@ class Create(AAZCommand):
     """Create a data export rule for a given workspace.
 
     For more information, see
-    https://docs.microsoft.com/azure/azure-monitor/platform/logs-data-export
+    https://learn.microsoft.com/azure/azure-monitor/platform/logs-data-export
 
     :example: Create a data export rule for a given workspace.
         az monitor log-analytics workspace data-export create -g MyRG --workspace-name MyWS -n MyDataExport --destination <storage account id> --enable -t <table name>
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_update.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_update.py
index 470b55e6ff6..d7a44bceeee 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_update.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/data_export/_update.py
@@ -18,7 +18,7 @@ class Update(AAZCommand):
     """Update a data export rule for a given workspace.
 
     For more information, see
-    https://docs.microsoft.com/azure/azure-monitor/platform/logs-data-export
+    https://learn.microsoft.com/azure/azure-monitor/platform/logs-data-export
 
     :example: Update a data export rule for a given workspace.
         az monitor log-analytics workspace data-export update -g MyRG --workspace-name MyWS -n MyDataExport --destination <event hub namespace id> -t <table name> --enable false
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_create.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_create.py
index 42ff4611260..cd3e2861328 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_create.py
@@ -87,7 +87,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.func_param = AAZStrArg(
             options=["--fp", "--func-param"],
             arg_group="Properties",
-            help="The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to https://docs.microsoft.com/azure/kusto/query/functions/user-defined-functions.",
+            help="The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to https://learn.microsoft.com/azure/kusto/query/functions/user-defined-functions.",
         )
         _args_schema.saved_query = AAZStrArg(
             options=["-q", "--saved-query"],
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_update.py b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_update.py
index 81a28a55e71..7c337c55976 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_update.py
+++ b/src/azure-cli/azure/cli/command_modules/monitor/aaz/latest/monitor/log_analytics/workspace/saved_search/_update.py
@@ -88,7 +88,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.func_param = AAZStrArg(
             options=["--fp", "--func-param"],
             arg_group="Properties",
-            help="The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to https://docs.microsoft.com/azure/kusto/query/functions/user-defined-functions.",
+            help="The optional function parameters if query serves as a function. Value should be in the following format: 'param-name1:type1 = default_value1, param-name2:type2 = default_value2'. For more examples and proper syntax please refer to https://learn.microsoft.com/azure/kusto/query/functions/user-defined-functions.",
             nullable=True,
         )
         _args_schema.saved_query = AAZStrArg(
diff --git a/src/azure-cli/azure/cli/command_modules/monitor/tests/latest/recordings/test_metrics_alert_metric_name_with_special_characters.yaml b/src/azure-cli/azure/cli/command_modules/monitor/tests/latest/recordings/test_metrics_alert_metric_name_with_special_characters.yaml
index 52f14181535..b71f55f0656 100644
--- a/src/azure-cli/azure/cli/command_modules/monitor/tests/latest/recordings/test_metrics_alert_metric_name_with_special_characters.yaml
+++ b/src/azure-cli/azure/cli/command_modules/monitor/tests/latest/recordings/test_metrics_alert_metric_name_with_special_characters.yaml
@@ -128,7 +128,7 @@ interactions:
     body:
       string: '{"code":"BadRequest","message":"Couldn''t find a metric named MS-ERRORCODE-SU001.
         Make sure the name is correct. If this metric hasn''t been reported yet, use
-        the -skipMetricValidation flag. Learn more here: https://docs.microsoft.com/azure/azure-monitor/platform/alerts-troubleshoot-metric#define-an-alert-rule-on-a-custom-metric-that-isnt-emitted-yet  Activity
+        the -skipMetricValidation flag. Learn more here: https://learn.microsoft.com/azure/azure-monitor/platform/alerts-troubleshoot-metric#define-an-alert-rule-on-a-custom-metric-that-isnt-emitted-yet  Activity
         ID: 000f49f5-efde-4355-a1b0-117da1b1b663."}'
     headers:
       api-supported-versions:
@@ -193,7 +193,7 @@ interactions:
     body:
       string: '{"code":"BadRequest","message":"Couldn''t find a metric named MS-ERRORCODE|,-SU001.
         Make sure the name is correct. If this metric hasn''t been reported yet, use
-        the -skipMetricValidation flag. Learn more here: https://docs.microsoft.com/azure/azure-monitor/platform/alerts-troubleshoot-metric#define-an-alert-rule-on-a-custom-metric-that-isnt-emitted-yet  Activity
+        the -skipMetricValidation flag. Learn more here: https://learn.microsoft.com/azure/azure-monitor/platform/alerts-troubleshoot-metric#define-an-alert-rule-on-a-custom-metric-that-isnt-emitted-yet  Activity
         ID: 136306d9-8a12-42c4-add2-7b1f86d3bc7c."}'
     headers:
       api-supported-versions:
diff --git a/src/azure-cli/azure/cli/command_modules/mysql/_help.py b/src/azure-cli/azure/cli/command_modules/mysql/_help.py
index 6213f998cd7..823e92e8914 100644
--- a/src/azure-cli/azure/cli/command_modules/mysql/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/mysql/_help.py
@@ -47,11 +47,11 @@
 
     - Configure public access
 
-    https://docs.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-firewall-cli
+    https://learn.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-firewall-cli
 
     - Configure private access
 
-    https://docs.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-virtual-network-cli
+    https://learn.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-virtual-network-cli
 
 examples:
   - name: >
@@ -231,11 +231,11 @@
 
     - Configure public access
 
-    https://docs.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-firewall-cli
+    https://learn.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-firewall-cli
 
     - Configure private access
 
-    https://docs.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-virtual-network-cli
+    https://learn.microsoft.com/en-us/azure/mysql/flexible-server/how-to-manage-virtual-network-cli
 
 examples:
   - name: >
diff --git a/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/_create.py
index 0c4e92e8305..4afa12a6972 100644
--- a/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/_create.py
@@ -14,7 +14,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/mysql/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_proxy_resource.yaml b/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_proxy_resource.yaml
index 6d2c5e3aa31..fc5bdf4ab1b 100644
--- a/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_proxy_resource.yaml
+++ b/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_proxy_resource.yaml
@@ -2539,11 +2539,11 @@ interactions:
         MySQL Authentication. Configure this parameter only when Azure AD authentication
         is configured.","defaultValue":"OFF","dataType":"Enumeration","allowedValues":"ON,OFF","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/aad_auth_only","name":"aad_auth_only","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"OFF","currentValue":"OFF","description":"Tell
         the server to enable or disable archive engine.","defaultValue":"OFF","dataType":"Enumeration","allowedValues":"ON,OFF","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"False","isReadOnly":"True","documentationLink":"https://dev.mysql.com/doc/refman/5.7/en/archive-storage-engine.html"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/archive","name":"archive","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"OFF","currentValue":"OFF","description":"Allow
-        to audit the log.","defaultValue":"OFF","dataType":"Enumeration","allowedValues":"ON,OFF","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://docs.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_enabled","name":"audit_log_enabled","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"CONNECTION","currentValue":"CONNECTION","description":"Select
-        the events to audit logs.","defaultValue":"CONNECTION","dataType":"Set","allowedValues":"DDL,DML_SELECT,DML_NONSELECT,DCL,ADMIN,DML,GENERAL,CONNECTION,CONNECTION_V2,TABLE_ACCESS","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://docs.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_events","name":"audit_log_events","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"azure_superuser","currentValue":"azure_superuser","description":"The
-        comma-separated user list whose commands will not be in the audit logs.","defaultValue":"azure_superuser","dataType":"String","allowedValues":"","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://docs.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_exclude_users","name":"audit_log_exclude_users","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"","currentValue":"","description":"The
+        to audit the log.","defaultValue":"OFF","dataType":"Enumeration","allowedValues":"ON,OFF","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://learn.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_enabled","name":"audit_log_enabled","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"CONNECTION","currentValue":"CONNECTION","description":"Select
+        the events to audit logs.","defaultValue":"CONNECTION","dataType":"Set","allowedValues":"DDL,DML_SELECT,DML_NONSELECT,DCL,ADMIN,DML,GENERAL,CONNECTION,CONNECTION_V2,TABLE_ACCESS","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://learn.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_events","name":"audit_log_events","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"azure_superuser","currentValue":"azure_superuser","description":"The
+        comma-separated user list whose commands will not be in the audit logs.","defaultValue":"azure_superuser","dataType":"String","allowedValues":"","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://learn.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_exclude_users","name":"audit_log_exclude_users","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"","currentValue":"","description":"The
         comma-separated user list whose commands will be in the audit logs. It takes
-        higher priority if the same user name is found in audit_log_exclude_users.","defaultValue":"","dataType":"String","allowedValues":"","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://docs.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_include_users","name":"audit_log_include_users","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"ON","currentValue":"ON","description":"Allow
+        higher priority if the same user name is found in audit_log_exclude_users.","defaultValue":"","dataType":"String","allowedValues":"","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://learn.microsoft.com/en-us/azure/mysql/concepts-audit-logs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_log_include_users","name":"audit_log_include_users","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"ON","currentValue":"ON","description":"Allow
         to audit the slow log.","defaultValue":"ON","dataType":"Enumeration","allowedValues":"ON,OFF","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/audit_slow_log_enabled","name":"audit_slow_log_enabled","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"OFF","currentValue":"OFF","description":"Controls
         whether the server autogenerates SSL key and certificate files in the data
         directory, if they do not already exist.","defaultValue":"OFF","dataType":"Enumeration","allowedValues":"ON,OFF","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"False","isReadOnly":"True","documentationLink":"https://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_auto_generate_certs"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/auto_generate_certs","name":"auto_generate_certs","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"1","currentValue":"1","description":"The
@@ -2568,7 +2568,7 @@ interactions:
         in the binary log.","defaultValue":"CRC32","dataType":"Enumeration","allowedValues":"NONE,CRC32","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"True","documentationLink":"https://dev.mysql.com/doc/refman/5.7/en/replication-options-binary-log.html#sysvar_binlog_checksum"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/binlog_checksum","name":"binlog_checksum","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"ABORT_SERVER","currentValue":"ABORT_SERVER","description":"Controls
         what happens when the server cannot write to the binary log, which can cause
         the master''s log to become inconsistent and replication slaves to lose synchronization.","defaultValue":"ABORT_SERVER","dataType":"Enumeration","allowedValues":"IGNORE_ERROR,ABORT_SERVER","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"True","documentationLink":"https://dev.mysql.com/doc/refman/5.7/en/replication-options-binary-log.html#sysvar_binlog_error_action"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/binlog_error_action","name":"binlog_error_action","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"0","currentValue":"0","description":"Number
-        of seconds to service waits before the binary log file gets purged. See: https://docs.microsoft.com/en-us/azure/mysql/flexible-server/concepts-server-parameters#binlog_expire_logs_seconds","defaultValue":"0","dataType":"Integer","allowedValues":"0-4294967295","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://docs.microsoft.com/en-us/azure/mysql/concepts-server-parameters#binlog_expire_logs_seconds"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/binlog_expire_logs_seconds","name":"binlog_expire_logs_seconds","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"ROW","currentValue":"ROW","description":"This
+        of seconds to service waits before the binary log file gets purged. See: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-server-parameters#binlog_expire_logs_seconds","defaultValue":"0","dataType":"Integer","allowedValues":"0-4294967295","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"False","documentationLink":"https://learn.microsoft.com/en-us/azure/mysql/concepts-server-parameters#binlog_expire_logs_seconds"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/binlog_expire_logs_seconds","name":"binlog_expire_logs_seconds","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"ROW","currentValue":"ROW","description":"This
         variable sets the binary logging format, and can be any one of STATEMENT,
         ROW, or MIXED.","defaultValue":"ROW","dataType":"Enumeration","allowedValues":"ROW,STATEMENT,MIXED","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True","isReadOnly":"True","documentationLink":"https://dev.mysql.com/doc/refman/5.7/en/replication-options-binary-log.html#sysvar_binlog_format"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-000002/configurations/binlog_format","name":"binlog_format","type":"Microsoft.DBforMySQL/flexibleServers/configurations"},{"properties":{"value":"0","currentValue":"0","description":"Controls
         how many microseconds the binary log commit waits before synchronizing the
diff --git a/src/azure-cli/azure/cli/command_modules/network/_help.py b/src/azure-cli/azure/cli/command_modules/network/_help.py
index 37047d08e2a..b00bd5f0d9d 100644
--- a/src/azure-cli/azure/cli/command_modules/network/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/network/_help.py
@@ -15,7 +15,7 @@
 helps['network application-gateway'] = """
 type: group
 short-summary: Manage application-level routing and load balancing services.
-long-summary: To learn more about Application Gateway, visit https://docs.microsoft.com/azure/application-gateway/application-gateway-create-gateway-cli
+long-summary: To learn more about Application Gateway, visit https://learn.microsoft.com/azure/application-gateway/application-gateway-create-gateway-cli
 """
 
 helps['network application-gateway address-pool'] = """
@@ -914,7 +914,7 @@
 type: group
 short-summary: Evaluate probe information and define http/https routing rules.
 long-summary: >
-    For more information, visit, https://docs.microsoft.com/azure/application-gateway/application-gateway-customize-waf-rules-cli
+    For more information, visit, https://learn.microsoft.com/azure/application-gateway/application-gateway-customize-waf-rules-cli
 """
 
 helps['network application-gateway rule create'] = """
@@ -1042,7 +1042,7 @@
 helps['network application-gateway ssl-cert'] = """
 type: group
 short-summary: Manage SSL certificates of an application gateway.
-long-summary: For more information visit https://docs.microsoft.com/azure/application-gateway/application-gateway-ssl-cli
+long-summary: For more information visit https://learn.microsoft.com/azure/application-gateway/application-gateway-ssl-cli
 """
 
 helps['network application-gateway ssl-cert create'] = """
@@ -1235,7 +1235,7 @@
 long-summary: >
     The map must be created with at least one rule. This command requires the creation of the
     first rule at the time the map is created. To learn more
-    visit https://docs.microsoft.com/azure/application-gateway/application-gateway-create-url-route-cli
+    visit https://learn.microsoft.com/azure/application-gateway/application-gateway-create-url-route-cli
 examples:
   - name: Create a URL path map with a rule.
     text: |
@@ -1313,7 +1313,7 @@
 short-summary: Configure the settings of a web application firewall.
 long-summary: >
     These commands are only applicable to application gateways with an SKU type of WAF. To learn
-    more, visit https://docs.microsoft.com/azure/application-gateway/application-gateway-web-application-firewall-cli
+    more, visit https://learn.microsoft.com/azure/application-gateway/application-gateway-web-application-firewall-cli
 """
 
 helps['network application-gateway waf-config list-rule-sets'] = """
@@ -1518,7 +1518,7 @@
 type: group
 short-summary: >
     Manage managed rules of a waf-policy.
-    Visit: https://docs.microsoft.com/azure/web-application-firewall/afds/afds-overview
+    Visit: https://learn.microsoft.com/azure/web-application-firewall/afds/afds-overview
 """
 
 helps['network application-gateway waf-policy managed-rule rule-set'] = """
@@ -1530,7 +1530,7 @@
 type: command
 short-summary: >
   Add managed rule set to the WAF policy managed rules. For rule set and rules, please visit:
-  https://docs.microsoft.com/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
+  https://learn.microsoft.com/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
 parameters:
   - name: --rule
     short-summary: The rule that will be disabled. If none specified, all rules in the group will be disabled. If provided, --group-name must be provided too.
@@ -1553,7 +1553,7 @@
 short-summary: >
   Manage rules of a WAF policy.
   If --group-name and --rules are provided, override existing rules. If --group-name is provided, clear all rules under a certain rule group. If neither of them are provided, update rule set and clear all rules under itself.
-  For rule set and rules, please visit: https://docs.microsoft.com/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
+  For rule set and rules, please visit: https://learn.microsoft.com/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
 parameters:
   - name: --rule
     short-summary: The rule that will be disabled. If none specified, all rules in the group will be disabled. If provided, --group-name must be provided too.
@@ -2810,7 +2810,7 @@
 short-summary: Manage dedicated private network fiber connections to Azure.
 long-summary: >
     To learn more about ExpressRoute circuits visit
-    https://docs.microsoft.com/azure/expressroute/howto-circuit-cli
+    https://learn.microsoft.com/azure/expressroute/howto-circuit-cli
 """
 
 helps['network express-route auth'] = """
@@ -2818,7 +2818,7 @@
 short-summary: Manage authentication of an ExpressRoute circuit.
 long-summary: >
     To learn more about ExpressRoute circuit authentication visit
-    https://docs.microsoft.com/azure/expressroute/howto-linkvnet-cli#connect-a-virtual-network-in-a-different-subscription-to-a-circuit
+    https://learn.microsoft.com/azure/expressroute/howto-linkvnet-cli#connect-a-virtual-network-in-a-different-subscription-to-a-circuit
 """
 
 helps['network express-route auth create'] = """
@@ -3632,7 +3632,7 @@
 type: group
 short-summary: Manage and configure load balancers.
 long-summary: |
-  To learn more about Azure Load Balancer visit https://docs.microsoft.com/azure/load-balancer/load-balancer-get-started-internet-arm-cli
+  To learn more about Azure Load Balancer visit https://learn.microsoft.com/azure/load-balancer/load-balancer-get-started-internet-arm-cli
 """
 
 helps['network lb wait'] = """
@@ -4138,7 +4138,7 @@
 type: group
 short-summary: Manage network interfaces.
 long-summary: >
-    To learn more about network interfaces in Azure visit https://docs.microsoft.com/azure/virtual-network/virtual-network-network-interface
+    To learn more about network interfaces in Azure visit https://learn.microsoft.com/azure/virtual-network/virtual-network-network-interface
 """
 
 helps['network nic create'] = """
@@ -4314,7 +4314,7 @@
 type: command
 short-summary: List all effective network security groups applied to a network interface.
 long-summary: >
-    To learn more about troubleshooting using effective security rules visit https://docs.microsoft.com/azure/virtual-network/virtual-network-nsg-troubleshoot-portal
+    To learn more about troubleshooting using effective security rules visit https://learn.microsoft.com/azure/virtual-network/virtual-network-nsg-troubleshoot-portal
 examples:
   - name: List the effective security groups associated with a NIC.
     text: az network nic list-effective-nsg -g MyResourceGroup -n MyNic
@@ -4333,7 +4333,7 @@
 short-summary: Show the effective route table applied to a network interface.
 long-summary: >
     To learn more about troubleshooting using the effective route tables visit
-    https://docs.microsoft.com/azure/virtual-network/virtual-network-routes-troubleshoot-portal#using-effective-routes-to-troubleshoot-vm-traffic-flow
+    https://learn.microsoft.com/azure/virtual-network/virtual-network-routes-troubleshoot-portal#using-effective-routes-to-troubleshoot-vm-traffic-flow
 examples:
   - name: Show the effective routes applied to a network interface.
     text: az network nic show-effective-route-table -g MyResourceGroup -n MyNic
@@ -4757,7 +4757,7 @@
 type: group
 short-summary: Manage public IP addresses.
 long-summary: >
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address
 """
 
 helps['network public-ip create'] = """
@@ -4926,7 +4926,7 @@
 short-summary: Create a virtual network.
 long-summary: >
     You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix.
-    To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network
+    To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network
 examples:
   - name: Create a virtual network.
     text: az network vnet create -g MyResourceGroup -n MyVnet
@@ -5056,7 +5056,7 @@
 type: group
 short-summary: Use an Azure Virtual Network Gateway to establish secure, cross-premises connectivity.
 long-summary: >
-    To learn more about Azure Virtual Network Gateways, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli
+    To learn more about Azure Virtual Network Gateways, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli
 """
 
 helps['network vnet-gateway create'] = """
@@ -5091,7 +5091,7 @@
     In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are
      connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use.
      For more information, follow the order of instructions on this page:
-     https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+     https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 examples:
   - name: Delete a virtual network gateway.
     text: az network vnet-gateway delete -g MyResourceGroup -n MyVnetGateway
@@ -5443,8 +5443,8 @@
 short-summary: Manage VPN connections.
 long-summary: >
     For more information on site-to-site connections,
-    visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
-    For more information on Vnet-to-Vnet connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli
+    visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
+    For more information on Vnet-to-Vnet connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli
 """
 
 helps['network vpn-connection create'] = """
@@ -5657,7 +5657,7 @@
 type: group
 short-summary: Manage the Azure Network Watcher.
 long-summary: >
-    Network Watcher assists with monitoring and diagnosing conditions at a network scenario level. To learn more visit https://docs.microsoft.com/azure/network-watcher/
+    Network Watcher assists with monitoring and diagnosing conditions at a network scenario level. To learn more visit https://learn.microsoft.com/azure/network-watcher/
 """
 
 helps['network watcher configure'] = """
@@ -5682,7 +5682,7 @@
 type: group
 short-summary: Manage network security group flow logging.
 long-summary: >
-    For more information about configuring flow logs visit https://docs.microsoft.com/azure/network-watcher/network-watcher-nsg-flow-logging-cli
+    For more information about configuring flow logs visit https://learn.microsoft.com/azure/network-watcher/network-watcher-nsg-flow-logging-cli
 """
 
 helps['network watcher flow-log create'] = """
@@ -5864,7 +5864,7 @@
 short-summary: Manage packet capture sessions on VMs.
 long-summary: >
     These commands require that both Azure Network Watcher is enabled for the VMs region and that AzureNetworkWatcherExtension is enabled on the VM.
-    For more information visit https://docs.microsoft.com/azure/network-watcher/network-watcher-packet-capture-manage-cli
+    For more information visit https://learn.microsoft.com/azure/network-watcher/network-watcher-packet-capture-manage-cli
 """
 
 helps['network watcher packet-capture create'] = """
@@ -6023,7 +6023,7 @@
 short-summary: Get information on the 'next hop' of a VM.
 long-summary: >
     Requires that Network Watcher is enabled for the region in which the VM is located.
-    For more information about show-next-hop visit https://docs.microsoft.com/azure/network-watcher/network-watcher-check-next-hop-cli
+    For more information about show-next-hop visit https://learn.microsoft.com/azure/network-watcher/network-watcher-check-next-hop-cli
 examples:
   - name: Get the next hop from a VMs assigned IP address to a destination at 10.1.0.4.
     text: az network watcher show-next-hop -g MyResourceGroup --vm MyVm --source-ip 10.0.0.4 --dest-ip 10.1.0.4
@@ -6033,7 +6033,7 @@
 type: command
 short-summary: Get detailed security information on a VM for the currently configured network security group.
 long-summary: >
-    For more information on using security group view visit https://docs.microsoft.com/azure/network-watcher/network-watcher-security-group-view-cli
+    For more information on using security group view visit https://learn.microsoft.com/azure/network-watcher/network-watcher-security-group-view-cli
 examples:
   - name: Get the network security group information for the specified VM.
     text: az network watcher show-security-group-view -g MyResourceGroup --vm MyVm
@@ -6042,7 +6042,7 @@
 helps['network watcher show-topology'] = """
 type: command
 short-summary: Get the network topology of a resource group, virtual network or subnet.
-long-summary: For more information about using network topology visit https://docs.microsoft.com/azure/network-watcher/network-watcher-topology-cli
+long-summary: For more information about using network topology visit https://learn.microsoft.com/azure/network-watcher/network-watcher-topology-cli
 parameters:
   - name: --resource-group -g
     short-summary: The name of the target resource group to perform topology on.
@@ -6061,7 +6061,7 @@
 short-summary: Test if a connection can be established between a Virtual Machine and a given endpoint.
 long-summary: >
     To check connectivity between two VMs in different regions, use the VM ids instead of the VM names for the source and destination resource arguments.
-    To register for this feature or see additional examples visit https://docs.microsoft.com/azure/network-watcher/network-watcher-connectivity-cli
+    To register for this feature or see additional examples visit https://learn.microsoft.com/azure/network-watcher/network-watcher-connectivity-cli
 parameters:
   - name: --source-resource
     short-summary: Name or ID of the resource from which to originate traffic.
@@ -6087,7 +6087,7 @@
 short-summary: Test IP flow to/from a VM given the currently configured network security group rules.
 long-summary: >
     Requires that Network Watcher is enabled for the region in which the VM is located.
-    For more information visit https://docs.microsoft.com/azure/network-watcher/network-watcher-check-ip-flow-verify-cli
+    For more information visit https://learn.microsoft.com/azure/network-watcher/network-watcher-check-ip-flow-verify-cli
 parameters:
   - name: --local
     short-summary: >
@@ -6112,7 +6112,7 @@
 type: group
 short-summary: Manage Network Watcher troubleshooting sessions.
 long-summary: >
-    For more information on configuring troubleshooting visit https://docs.microsoft.com/azure/network-watcher/network-watcher-troubleshoot-manage-cli
+    For more information on configuring troubleshooting visit https://learn.microsoft.com/azure/network-watcher/network-watcher-troubleshoot-manage-cli
 """
 
 helps['network watcher troubleshooting show'] = """
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/_list_service_tags.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/_list_service_tags.py
index 5fd3c365182..693e8deb1a7 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/_list_service_tags.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/_list_service_tags.py
@@ -17,7 +17,7 @@
 class ListServiceTags(AAZCommand):
     """List all service tags which are below to different resources
 
-    A service tag represents a group of IP address prefixes to help minimize complexity for security rule creation. To learn more about list-service-tags, visit https://docs.microsoft.com/azure/virtual-network/security-overview#service-tags. Note that the location parameter is used as a reference for version (not as a filter based on location). For example, even if you specify --location eastus2 you will get the list of service tags with prefix details across all regions but limited to the cloud that your subscription belongs to (i.e. Public, US government, China or Germany).
+    A service tag represents a group of IP address prefixes to help minimize complexity for security rule creation. To learn more about list-service-tags, visit https://learn.microsoft.com/azure/virtual-network/security-overview#service-tags. Note that the location parameter is used as a reference for version (not as a filter based on location). For example, even if you specify --location eastus2 you will get the list of service tags with prefix details across all regions but limited to the cloud that your subscription belongs to (i.e. Public, US government, China or Germany).
 
     :example: Gets a list of service tag information resources. (autogenerated)
         az network list-service-tags --location westus2
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_create.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_create.py
index 221ce248097..6d39fba027d 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_create.py
@@ -102,7 +102,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.authentication_certificates = AAZListArg(
             options=["--authentication-certificates"],
             arg_group="Properties",
-            help="Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.autoscale_configuration = AAZObjectArg(
             options=["--autoscale-configuration"],
@@ -112,17 +112,17 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.backend_address_pools = AAZListArg(
             options=["--backend-address-pools"],
             arg_group="Properties",
-            help="Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.backend_http_settings_collection = AAZListArg(
             options=["--backend-http-settings-collection"],
             arg_group="Properties",
-            help="Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.backend_settings_collection = AAZListArg(
             options=["--backend-settings-collection"],
             arg_group="Properties",
-            help="Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.custom_error_configurations = AAZListArg(
             options=["--custom-error-configurations"],
@@ -153,17 +153,17 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.frontend_ip_configurations = AAZListArg(
             options=["--frontend-ip-configurations"],
             arg_group="Properties",
-            help="Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.frontend_ports = AAZListArg(
             options=["--frontend-ports"],
             arg_group="Properties",
-            help="Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.gateway_ip_configurations = AAZListArg(
             options=["--gateway-ip-configurations"],
             arg_group="Properties",
-            help="Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.global_configuration = AAZObjectArg(
             options=["--global-configuration"],
@@ -173,12 +173,12 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.http_listeners = AAZListArg(
             options=["--http-listeners"],
             arg_group="Properties",
-            help="Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.listeners = AAZListArg(
             options=["--listeners"],
             arg_group="Properties",
-            help="Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.load_distribution_policies = AAZListArg(
             options=["--load-distribution-policies"],
@@ -198,7 +198,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.redirect_configurations = AAZListArg(
             options=["--redirect-configurations"],
             arg_group="Properties",
-            help="Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.request_routing_rules = AAZListArg(
             options=["--request-routing-rules"],
@@ -223,7 +223,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.ssl_certificates = AAZListArg(
             options=["--ssl-certificates"],
             arg_group="Properties",
-            help="SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.ssl_policy = AAZObjectArg(
             options=["--ssl-policy"],
@@ -234,22 +234,22 @@ def _build_arguments_schema(cls, *args, **kwargs):
         _args_schema.ssl_profiles = AAZListArg(
             options=["--ssl-profiles"],
             arg_group="Properties",
-            help="SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.trusted_client_certificates = AAZListArg(
             options=["--trusted-client-certificates"],
             arg_group="Properties",
-            help="Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.trusted_root_certificates = AAZListArg(
             options=["--trusted-root-certificates"],
             arg_group="Properties",
-            help="Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.url_path_maps = AAZListArg(
             options=["--url-path-maps"],
             arg_group="Properties",
-            help="URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
         )
         _args_schema.web_application_firewall_configuration = AAZObjectArg(
             options=["--web-application-firewall-configuration"],
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_update.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_update.py
index e997e83a535..109d45b415c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_update.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_update.py
@@ -102,7 +102,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         )
         _args_schema.ssl_profiles = AAZListArg(
             options=["--ssl-profiles"],
-            help="SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
+            help="SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://learn.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).",
             nullable=True,
         )
         _args_schema.tags = AAZDictArg(
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/asg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/asg/__cmd_group.py
index 2478d5e31b1..6632688b574 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/asg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/asg/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage application security groups (ASGs).
 
-    You can configure network security as a natural extension of an application's structure, ASG allows you to group virtual machines and define network security policies based on those groups. You can specify an application security group as the source and destination in a NSG security rule. For more information, visit https://docs.microsoft.com/azure/virtual-network/create-network-security-group-preview.
+    You can configure network security as a natural extension of an application's structure, ASG allows you to group virtual machines and define network security policies based on those groups. You can specify an application security group as the source and destination in a NSG security rule. For more information, visit https://learn.microsoft.com/azure/virtual-network/create-network-security-group-preview.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/__cmd_group.py
index 59452692074..847520714ea 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage dedicated private network fiber connections to Azure.
 
-    To learn more about ExpressRoute circuits visit https://docs.microsoft.com/azure/expressroute/howto-circuit-cli.
+    To learn more about ExpressRoute circuits visit https://learn.microsoft.com/azure/expressroute/howto-circuit-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/auth/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/auth/__cmd_group.py
index 3106cd23274..c26812e6a7a 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/auth/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/auth/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage authentication of an ExpressRoute circuit.
 
-    To learn more about ExpressRoute circuit authentication visit https://docs.microsoft.com/azure/expressroute/howto-linkvnet-cli#connect-a-virtual-network-in-a-different-subscription-to-a-circuit.
+    To learn more about ExpressRoute circuit authentication visit https://learn.microsoft.com/azure/expressroute/howto-linkvnet-cli#connect-a-virtual-network-in-a-different-subscription-to-a-circuit.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_create.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_create.py
index 4b71f929f6f..512faca223c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_create.py
@@ -67,7 +67,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         )
         _args_schema.internet_security = AAZBoolArg(
             options=["--internet-security"],
-            help="Enable internet security. A virtual hub can have the ability to propagate a learned default route to this ExpressRoute connection. This ref https://review.docs.microsoft.com/en-us/azure/virtual-wan/effective-routes-virtual-hub?branch=pr-en-us-91866#aboutdefaultroute might be helpful. Allowed values: false, true.",
+            help="Enable internet security. A virtual hub can have the ability to propagate a learned default route to this ExpressRoute connection. This ref https://review.learn.microsoft.com/en-us/azure/virtual-wan/effective-routes-virtual-hub?branch=pr-en-us-91866#aboutdefaultroute might be helpful. Allowed values: false, true.",
         )
         _args_schema.routing_weight = AAZIntArg(
             options=["--routing-weight"],
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_update.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_update.py
index 7e2f7dfe7b6..080415f14bc 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_update.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/express_route/gateway/connection/_update.py
@@ -69,7 +69,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
         )
         _args_schema.internet_security = AAZBoolArg(
             options=["--internet-security"],
-            help="Enable internet security. A virtual hub can have the ability to propagate a learned default route to this ExpressRoute connection. This ref https://review.docs.microsoft.com/en-us/azure/virtual-wan/effective-routes-virtual-hub?branch=pr-en-us-91866#aboutdefaultroute might be helpful.",
+            help="Enable internet security. A virtual hub can have the ability to propagate a learned default route to this ExpressRoute connection. This ref https://review.learn.microsoft.com/en-us/azure/virtual-wan/effective-routes-virtual-hub?branch=pr-en-us-91866#aboutdefaultroute might be helpful.",
             nullable=True,
         )
         _args_schema.routing_weight = AAZIntArg(
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/__cmd_group.py
index 317226bd1dc..d8d6d8ce87e 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage local gateways.
 
     For more information on local gateways, visit:
-    https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
+    https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/_delete.py
index c6c0bc1f9e2..5270f065a66 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/local_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a local VPN gateway.
 
-    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a Local Network Gateway.
         az network local-gateway delete -g MyResourceGroup -n MyLocalGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/nsg/__cmd_group.py
index 85eeb651d59..581b4fd303c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/nsg/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/public_ip/__cmd_group.py
index 71a8b5ead41..07c867f7590 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/public_ip/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/__cmd_group.py
index ec3140ee547..8db8cccf4a5 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_create.py
index 1f4e633a36c..a1d0f6ba09e 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_create.py
@@ -17,7 +17,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_list_endpoint_services.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_list_endpoint_services.py
index 91f072a15d9..bf481c1231c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_list_endpoint_services.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/_list_endpoint_services.py
@@ -17,7 +17,7 @@
 class ListEndpointServices(AAZCommand):
     """List which services support VNet service tunneling in a given region.
 
-    To learn more about service endpoints visit https://docs.microsoft.com/azure/virtual-network/virtual-network-service-endpoints-configure#azure-cli.
+    To learn more about service endpoints visit https://learn.microsoft.com/azure/virtual-network/virtual-network-service-endpoints-configure#azure-cli.
 
     :example: List the endpoint services available for use in the West US region.
         az network vnet list-endpoint-services -l westus -o table
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/subnet/__cmd_group.py
index 726db68c81e..7d97ad0f39f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/__cmd_group.py
index 152c02f35e5..06369b9d587 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Use an Azure Virtual Network Gateway to establish secure, cross-premises connectivity.
 
-    To learn more about Azure Virtual Network Gateways, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
+    To learn more about Azure Virtual Network Gateways, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/_delete.py
index e879594ece6..5d820c57443 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vnet_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a virtual network gateway.
 
-    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a virtual network gateway.
         az network vnet-gateway delete -g MyResourceGroup -n MyVnetGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vpn_connection/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vpn_connection/__cmd_group.py
index 4014c5712d2..7668b41df2f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vpn_connection/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/vpn_connection/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage VPN connections.
 
-    For more information on site-to-site connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
+    For more information on site-to-site connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/__cmd_group.py
index 1bf8e62957a..5b2808d698f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/__cmd_group.py
@@ -15,7 +15,7 @@
     "network watcher",
 )
 class __CMDGroup(AAZCommandGroup):
-    """Manage the Azure Network Watcher. Network Watcher assists with monitoring and diagnosing conditions at a network scenario level. To learn more visit https://docs.microsoft.com/azure/network-watcher/.
+    """Manage the Azure Network Watcher. Network Watcher assists with monitoring and diagnosing conditions at a network scenario level. To learn more visit https://learn.microsoft.com/azure/network-watcher/.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/flow_log/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/flow_log/__cmd_group.py
index 9db8975cdfd..432568837f8 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/flow_log/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/flow_log/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage network security group flow logging.
 
-    For more information about configuring flow logs visit https://docs.microsoft.com/azure/network-watcher/network-watcher-nsg-flow-logging-cli.
+    For more information about configuring flow logs visit https://learn.microsoft.com/azure/network-watcher/network-watcher-nsg-flow-logging-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/troubleshooting/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/troubleshooting/__cmd_group.py
index f16a6aebe4c..92aa2db4c3a 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/troubleshooting/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/watcher/troubleshooting/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Network Watcher troubleshooting sessions.
 
-    For more information on configuring troubleshooting visit https://docs.microsoft.com/azure/network-watcher/network-watcher-troubleshoot-manage-cli.
+    For more information on configuring troubleshooting visit https://learn.microsoft.com/azure/network-watcher/network-watcher-troubleshoot-manage-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/__cmd_group.py
index 317226bd1dc..d8d6d8ce87e 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage local gateways.
 
     For more information on local gateways, visit:
-    https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
+    https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/_delete.py
index 2e87755772a..c359dd3d428 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/local_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a local VPN gateway.
 
-    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a Local Network Gateway.
         az network local-gateway delete -g MyResourceGroup -n MyLocalGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/nsg/__cmd_group.py
index 85eeb651d59..581b4fd303c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/nsg/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/public_ip/__cmd_group.py
index 71a8b5ead41..07c867f7590 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/public_ip/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/__cmd_group.py
index ec3140ee547..8db8cccf4a5 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/_create.py
index 60ad4fb5116..ce2f128906c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/_create.py
@@ -17,7 +17,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/subnet/__cmd_group.py
index 726db68c81e..7d97ad0f39f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet/subnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/__cmd_group.py
index 152c02f35e5..06369b9d587 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Use an Azure Virtual Network Gateway to establish secure, cross-premises connectivity.
 
-    To learn more about Azure Virtual Network Gateways, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
+    To learn more about Azure Virtual Network Gateways, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/_delete.py
index f215c873df6..574dda2445f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vnet_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a virtual network gateway.
 
-    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a virtual network gateway.
         az network vnet-gateway delete -g MyResourceGroup -n MyVnetGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vpn_connection/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vpn_connection/__cmd_group.py
index 4014c5712d2..7668b41df2f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vpn_connection/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2017_03_09_profile/network/vpn_connection/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage VPN connections.
 
-    For more information on site-to-site connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
+    For more information on site-to-site connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/__cmd_group.py
index 317226bd1dc..d8d6d8ce87e 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage local gateways.
 
     For more information on local gateways, visit:
-    https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
+    https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/_delete.py
index 077d6759333..26ba7ee45b9 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/local_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a local VPN gateway.
 
-    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a Local Network Gateway.
         az network local-gateway delete -g MyResourceGroup -n MyLocalGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py
index 85eeb651d59..581b4fd303c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py
index 71a8b5ead41..07c867f7590 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py
index ec3140ee547..8db8cccf4a5 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_create.py
index ef433dd540a..f33f97198ae 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_create.py
@@ -17,7 +17,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_list_endpoint_services.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_list_endpoint_services.py
index 2c64f4efd0e..bd3bb286884 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_list_endpoint_services.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/_list_endpoint_services.py
@@ -17,7 +17,7 @@
 class ListEndpointServices(AAZCommand):
     """List which services support VNet service tunneling in a given region.
 
-    To learn more about service endpoints visit https://docs.microsoft.com/azure/virtual-network/virtual-network-service-endpoints-configure#azure-cli.
+    To learn more about service endpoints visit https://learn.microsoft.com/azure/virtual-network/virtual-network-service-endpoints-configure#azure-cli.
 
     :example: List the endpoint services available for use in the West US region.
         az network vnet list-endpoint-services -l westus -o table
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py
index 726db68c81e..7d97ad0f39f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/__cmd_group.py
index 152c02f35e5..06369b9d587 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Use an Azure Virtual Network Gateway to establish secure, cross-premises connectivity.
 
-    To learn more about Azure Virtual Network Gateways, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
+    To learn more about Azure Virtual Network Gateways, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/_delete.py
index 143f299eb5e..910963ff2c9 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vnet_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a virtual network gateway.
 
-    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a virtual network gateway.
         az network vnet-gateway delete -g MyResourceGroup -n MyVnetGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vpn_connection/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vpn_connection/__cmd_group.py
index 4014c5712d2..7668b41df2f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vpn_connection/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2018_03_01_hybrid/network/vpn_connection/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage VPN connections.
 
-    For more information on site-to-site connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
+    For more information on site-to-site connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/__cmd_group.py
index 317226bd1dc..d8d6d8ce87e 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage local gateways.
 
     For more information on local gateways, visit:
-    https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
+    https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli#localnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/_delete.py
index 96ff8c5af9a..f288054f2ed 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/local_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a local VPN gateway.
 
-    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Local Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a Local Network Gateway.
         az network local-gateway delete -g MyResourceGroup -n MyLocalGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
index 85eeb651d59..581b4fd303c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py
index 71a8b5ead41..07c867f7590 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
index ec3140ee547..8db8cccf4a5 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_create.py
index a33d31a4e3f..5306a608f1c 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_create.py
@@ -17,7 +17,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_list_endpoint_services.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_list_endpoint_services.py
index ed3c4351ff9..38d04168597 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_list_endpoint_services.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/_list_endpoint_services.py
@@ -17,7 +17,7 @@
 class ListEndpointServices(AAZCommand):
     """List which services support VNet service tunneling in a given region.
 
-    To learn more about service endpoints visit https://docs.microsoft.com/azure/virtual-network/virtual-network-service-endpoints-configure#azure-cli.
+    To learn more about service endpoints visit https://learn.microsoft.com/azure/virtual-network/virtual-network-service-endpoints-configure#azure-cli.
 
     :example: List the endpoint services available for use in the West US region.
         az network vnet list-endpoint-services -l westus -o table
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
index 726db68c81e..7d97ad0f39f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/__cmd_group.py
index 152c02f35e5..06369b9d587 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Use an Azure Virtual Network Gateway to establish secure, cross-premises connectivity.
 
-    To learn more about Azure Virtual Network Gateways, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
+    To learn more about Azure Virtual Network Gateways, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/_delete.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/_delete.py
index 35ad175a5fc..f3af90464a2 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/_delete.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vnet_gateway/_delete.py
@@ -17,7 +17,7 @@
 class Delete(AAZCommand):
     """Delete a virtual network gateway.
 
-    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
+    In order to delete a Virtual Network Gateway, you must first delete ALL Connection objects in Azure that are connected to the Gateway. After deleting the Gateway, proceed to delete other resources now not in use. For more information, follow the order of instructions on this page: https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-delete-vnet-gateway-portal
 
     :example: Delete a virtual network gateway.
         az network vnet-gateway delete -g MyResourceGroup -n MyVnetGateway
diff --git a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vpn_connection/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vpn_connection/__cmd_group.py
index 4014c5712d2..7668b41df2f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vpn_connection/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/network/aaz/profile_2020_09_01_hybrid/network/vpn_connection/__cmd_group.py
@@ -17,7 +17,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage VPN connections.
 
-    For more information on site-to-site connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
+    For more information on site-to-site connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli. For more information on Vnet-to-Vnet connections, visit https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/network/azure_stack/_params.py b/src/azure-cli/azure/cli/command_modules/network/azure_stack/_params.py
index 7f9208cc41e..6de52b9893b 100644
--- a/src/azure-cli/azure/cli/command_modules/network/azure_stack/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/network/azure_stack/_params.py
@@ -89,7 +89,7 @@ def load_arguments(self, _):
                    help='Space-separated names or IDs of virtual networks that register hostnames in this DNS zone. '
                         'Number of private DNS zones with virtual network auto-registration enabled is 1. '
                         'If you need to increase this limit, please contact Azure Support: '
-                        'https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits',
+                        'https://learn.microsoft.com/en-us/azure/azure-subscription-service-limits',
                    validator=get_vnet_validator('registration_vnets'))
         c.argument('resolution_vnets',
                    arg_group='Private Zone',
diff --git a/src/azure-cli/azure/cli/command_modules/network/custom.py b/src/azure-cli/azure/cli/command_modules/network/custom.py
index eeb32395f16..65a8e5ca765 100644
--- a/src/azure-cli/azure/cli/command_modules/network/custom.py
+++ b/src/azure-cli/azure/cli/command_modules/network/custom.py
@@ -2024,7 +2024,7 @@ def add_waf_managed_rule_set(cmd, resource_group_name, policy_name,
                              rule_set_type, rule_set_version, rule_group_name=None, rules=None):
     """
     Add managed rule set to the WAF policy managed rules.
-    Visit: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
+    Visit: https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
     """
     if rules is None:
         managed_rule_overrides = []
diff --git a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_connection.yaml b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_connection.yaml
index 8f4ef01fadf..7d12f7f1361 100644
--- a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_connection.yaml
+++ b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_connection.yaml
@@ -8296,7 +8296,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8329,7 +8329,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8362,7 +8362,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8395,7 +8395,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8428,7 +8428,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8460,7 +8460,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8492,7 +8492,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8524,7 +8524,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8556,7 +8556,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8588,7 +8588,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8620,7 +8620,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8652,7 +8652,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8684,7 +8684,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8716,7 +8716,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8748,7 +8748,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8780,7 +8780,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8812,7 +8812,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8844,7 +8844,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8876,7 +8876,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8908,7 +8908,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8940,7 +8940,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8972,7 +8972,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9004,7 +9004,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9036,7 +9036,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9068,7 +9068,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9100,7 +9100,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9132,7 +9132,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9165,7 +9165,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9198,7 +9198,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9231,7 +9231,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9264,7 +9264,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9297,7 +9297,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9330,7 +9330,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9363,7 +9363,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9396,7 +9396,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9429,7 +9429,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9461,7 +9461,7 @@ interactions:
         \"author\"\n                                }\n                            ],\n
         \                           \"document_names\": {\n                                \"description\":
         \"DESCRIPTION.rst\"\n                            },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9493,7 +9493,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -10193,7 +10193,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
+        \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"Proprietary https://aka.ms/azureml-preview-sdk-license
@@ -10232,7 +10232,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
+        \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"Proprietary https://aka.ms/azureml-preview-sdk-license
@@ -10271,7 +10271,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/azure/machine-learning/service/\"\n                            }\n
+        \"https://learn.microsoft.com/azure/machine-learning/service/\"\n                            }\n
         \                       }\n                    },\n                    \"extras\":
         [],\n                    \"generator\": \"bdist_wheel (0.30.0)\",\n                    \"license\":
         \"Proprietary https://aka.ms/azureml-preview-sdk-license \",\n                    \"metadata_version\":
@@ -12682,7 +12682,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/azure-sphere\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/azure-sphere\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"metadata_version\":
diff --git a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_identity.yaml b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_identity.yaml
index 65c23d8c4bf..1585e90a31a 100644
--- a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_identity.yaml
+++ b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_virtual_appliance_identity.yaml
@@ -8769,7 +8769,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -8807,7 +8807,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -8845,7 +8845,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -8883,7 +8883,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -8921,7 +8921,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -8959,7 +8959,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -8997,7 +8997,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9035,7 +9035,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9073,7 +9073,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9111,7 +9111,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9149,7 +9149,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9187,7 +9187,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9225,7 +9225,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9263,7 +9263,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9301,7 +9301,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9339,7 +9339,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9377,7 +9377,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9415,7 +9415,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9453,7 +9453,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9491,7 +9491,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9529,7 +9529,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9567,7 +9567,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9605,7 +9605,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9644,7 +9644,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9683,7 +9683,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9722,7 +9722,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9761,7 +9761,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9800,7 +9800,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9839,7 +9839,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9878,7 +9878,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9918,7 +9918,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9957,7 +9957,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
+        \ \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n           \
         \                 }\n                        }\n                    },\n \
         \                   \"extras\": [],\n                    \"generator\": \"\
         bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n     \
@@ -9995,7 +9995,7 @@ interactions:
         \                       ],\n                            \"document_names\"\
         : {\n                                \"description\": \"DESCRIPTION.rst\"\n\
         \                            },\n                            \"project_urls\"\
-        : {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\
+        : {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\
         \n                            }\n                        }\n             \
         \       },\n                    \"extras\": [],\n                    \"generator\"\
         : \"bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n \
@@ -10033,7 +10033,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\
+        \ \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\
         \n                            }\n                        }\n             \
         \       },\n                    \"extras\": [],\n                    \"generator\"\
         : \"bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n \
@@ -10740,7 +10740,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\",\n                                \"license\": \"LICENSE.txt\"\
         \n                            },\n                            \"project_urls\"\
-        : {\n                                \"Home\": \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\
+        : {\n                                \"Home\": \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\
         \n                            }\n                        }\n             \
         \       },\n                    \"extras\": [],\n                    \"generator\"\
         : \"bdist_wheel (0.30.0)\",\n                    \"license\": \"Proprietary\
@@ -10784,7 +10784,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\",\n                                \"license\": \"LICENSE.txt\"\
         \n                            },\n                            \"project_urls\"\
-        : {\n                                \"Home\": \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\
+        : {\n                                \"Home\": \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\
         \n                            }\n                        }\n             \
         \       },\n                    \"extras\": [],\n                    \"generator\"\
         : \"bdist_wheel (0.30.0)\",\n                    \"license\": \"Proprietary\
@@ -10828,7 +10828,7 @@ interactions:
         \           \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\",\n                                \"license\": \"LICENSE.txt\"\
         \n                            },\n                            \"project_urls\"\
-        : {\n                                \"Home\": \"https://docs.microsoft.com/azure/machine-learning/service/\"\
+        : {\n                                \"Home\": \"https://learn.microsoft.com/azure/machine-learning/service/\"\
         \n                            }\n                        }\n             \
         \       },\n                    \"extras\": [],\n                    \"generator\"\
         : \"bdist_wheel (0.30.0)\",\n                    \"license\": \"Proprietary\
@@ -13254,7 +13254,7 @@ interactions:
         \   \"document_names\": {\n                                \"description\"\
         : \"DESCRIPTION.rst\"\n                            },\n                  \
         \          \"project_urls\": {\n                                \"Home\":\
-        \ \"https://docs.microsoft.com/azure-sphere\"\n                          \
+        \ \"https://learn.microsoft.com/azure-sphere\"\n                          \
         \  }\n                        }\n                    },\n                \
         \    \"extras\": [],\n                    \"generator\": \"bdist_wheel (0.30.0)\"\
         ,\n                    \"license\": \"MIT\",\n                    \"metadata_version\"\
diff --git a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_watcher_troubleshooting.yaml b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_watcher_troubleshooting.yaml
index e12343e84a2..651f1ee4705 100644
--- a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_watcher_troubleshooting.yaml
+++ b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_watcher_troubleshooting.yaml
@@ -3457,7 +3457,7 @@ interactions:
         \"Create a cross premises connection\",\r\n          \"actionUri\": \"https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-howto-site-to-site-resource-manager-portal/\",\r\n
         \         \"actionUriText\": \"cross premises\"\r\n        },\r\n        {\r\n
         \         \"actionText\": \"Create a VNet-to-VNet connection\",\r\n          \"actionUri\":
-        \"https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal\",\r\n
+        \"https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal\",\r\n
         \         \"actionUriText\": \"VNet-to-VNet\"\r\n        },\r\n        {\r\n
         \         \"actionText\": \"If you are experiencing problems you believe are
         caused by Azure, contact support\",\r\n          \"actionUri\": \"http://azure.microsoft.com/support\",\r\n
@@ -4896,7 +4896,7 @@ interactions:
         \"Create a cross premises connection\",\r\n          \"actionUri\": \"https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-howto-site-to-site-resource-manager-portal/\",\r\n
         \         \"actionUriText\": \"cross premises\"\r\n        },\r\n        {\r\n
         \         \"actionText\": \"Create a VNet-to-VNet connection\",\r\n          \"actionUri\":
-        \"https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal\",\r\n
+        \"https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal\",\r\n
         \         \"actionUriText\": \"VNet-to-VNet\"\r\n        },\r\n        {\r\n
         \         \"actionText\": \"If you are experiencing problems you believe are
         caused by Azure, contact support\",\r\n          \"actionUri\": \"http://azure.microsoft.com/support\",\r\n
diff --git a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_private_link_endpoint_deviceupdate.yaml b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_private_link_endpoint_deviceupdate.yaml
index d45e1ef3ae8..4d6bcdc250f 100644
--- a/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_private_link_endpoint_deviceupdate.yaml
+++ b/src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_private_link_endpoint_deviceupdate.yaml
@@ -7252,7 +7252,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7284,7 +7284,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7316,7 +7316,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7348,7 +7348,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7380,7 +7380,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7412,7 +7412,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7444,7 +7444,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7476,7 +7476,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7508,7 +7508,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7540,7 +7540,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7572,7 +7572,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7604,7 +7604,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7636,7 +7636,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7668,7 +7668,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7700,7 +7700,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7732,7 +7732,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7764,7 +7764,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7796,7 +7796,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7828,7 +7828,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7860,7 +7860,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7892,7 +7892,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7924,7 +7924,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7957,7 +7957,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -7990,7 +7990,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8023,7 +8023,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8056,7 +8056,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8089,7 +8089,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8122,7 +8122,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8155,7 +8155,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8188,7 +8188,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8221,7 +8221,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8253,7 +8253,7 @@ interactions:
         \"author\"\n                                }\n                            ],\n
         \                           \"document_names\": {\n                                \"description\":
         \"DESCRIPTION.rst\"\n                            },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8285,7 +8285,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8903,7 +8903,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
+        \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"Proprietary https://aka.ms/azureml-preview-sdk-license
@@ -8942,7 +8942,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
+        \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"Proprietary https://aka.ms/azureml-preview-sdk-license
@@ -8981,7 +8981,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/azure/machine-learning/service/\"\n                            }\n
+        \"https://learn.microsoft.com/azure/machine-learning/service/\"\n                            }\n
         \                       }\n                    },\n                    \"extras\":
         [],\n                    \"generator\": \"bdist_wheel (0.30.0)\",\n                    \"license\":
         \"Proprietary https://aka.ms/azureml-preview-sdk-license \",\n                    \"metadata_version\":
@@ -10986,7 +10986,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/azure-sphere\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/azure-sphere\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"metadata_version\":
diff --git a/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/recordings/test_policy_insights_metadata.yaml b/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/recordings/test_policy_insights_metadata.yaml
index 7ea76f7f7c0..938c28434ef 100644
--- a/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/recordings/test_policy_insights_metadata.yaml
+++ b/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/recordings/test_policy_insights_metadata.yaml
@@ -3001,109 +3001,109 @@ interactions:
         SP 800-53 Rev. 4 SI-8","category":"System and Information Integrity","title":"Spam
         Protection","owner":"Customer","additionalContentUrl":"https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control?version=4.0&number=SI-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-8","name":"NIST_SP_800-53_R4_SI-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.1","category":"Network Security","title":"Protect resources
-        using Network Security Groups or Azure Firewall on your Virtual Network","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#11-protect-resources-using-network-security-groups-or-azure-firewall-on-your-virtual-network","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.1","name":"Azure_Security_Benchmark_v1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        using Network Security Groups or Azure Firewall on your Virtual Network","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#11-protect-resources-using-network-security-groups-or-azure-firewall-on-your-virtual-network","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.1","name":"Azure_Security_Benchmark_v1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.10","category":"Network Security","title":"Document traffic
-        configuration rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#110-document-traffic-configuration-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.10","name":"Azure_Security_Benchmark_v1.0_1.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        configuration rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#110-document-traffic-configuration-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.10","name":"Azure_Security_Benchmark_v1.0_1.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.11","category":"Network Security","title":"Use automated
-        tools to monitor network resource configurations and detect changes","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#111-use-automated-tools-to-monitor-network-resource-configurations-and-detect-changes","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.11","name":"Azure_Security_Benchmark_v1.0_1.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        tools to monitor network resource configurations and detect changes","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#111-use-automated-tools-to-monitor-network-resource-configurations-and-detect-changes","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.11","name":"Azure_Security_Benchmark_v1.0_1.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.2","category":"Network Security","title":"Monitor and
-        log the configuration and traffic of Vnets, Subnets, and NICs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#12-monitor-and-log-the-configuration-and-traffic-of-vnets-subnets-and-nics","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.2","name":"Azure_Security_Benchmark_v1.0_1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log the configuration and traffic of Vnets, Subnets, and NICs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#12-monitor-and-log-the-configuration-and-traffic-of-vnets-subnets-and-nics","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.2","name":"Azure_Security_Benchmark_v1.0_1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.3","category":"Network Security","title":"Protect critical
-        web applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#13-protect-critical-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.3","name":"Azure_Security_Benchmark_v1.0_1.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        web applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#13-protect-critical-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.3","name":"Azure_Security_Benchmark_v1.0_1.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.4","category":"Network Security","title":"Deny communications
-        with known malicious IP addresses","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#14-deny-communications-with-known-malicious-ip-addresses","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.4","name":"Azure_Security_Benchmark_v1.0_1.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        with known malicious IP addresses","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#14-deny-communications-with-known-malicious-ip-addresses","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.4","name":"Azure_Security_Benchmark_v1.0_1.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.5","category":"Network Security","title":"Record network
-        packets and flow logs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#15-record-network-packets-and-flow-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.5","name":"Azure_Security_Benchmark_v1.0_1.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        packets and flow logs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#15-record-network-packets-and-flow-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.5","name":"Azure_Security_Benchmark_v1.0_1.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.6","category":"Network Security","title":"Deploy network
-        based intrusion detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#16-deploy-network-based-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.6","name":"Azure_Security_Benchmark_v1.0_1.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        based intrusion detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#16-deploy-network-based-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.6","name":"Azure_Security_Benchmark_v1.0_1.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.7","category":"Network Security","title":"Manage traffic
-        to web applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#17-manage-traffic-to-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.7","name":"Azure_Security_Benchmark_v1.0_1.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to web applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#17-manage-traffic-to-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.7","name":"Azure_Security_Benchmark_v1.0_1.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.8","category":"Network Security","title":"Minimize complexity
-        and administrative overhead of network security rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#18-minimize-complexity-and-administrative-overhead-of-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.8","name":"Azure_Security_Benchmark_v1.0_1.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and administrative overhead of network security rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#18-minimize-complexity-and-administrative-overhead-of-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.8","name":"Azure_Security_Benchmark_v1.0_1.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.9","category":"Network Security","title":"Maintain standard
-        security configurations for network devices","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#19-maintain-standard-security-configurations-for-network-devices","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.9","name":"Azure_Security_Benchmark_v1.0_1.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security configurations for network devices","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#19-maintain-standard-security-configurations-for-network-devices","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.9","name":"Azure_Security_Benchmark_v1.0_1.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.1","category":"Incident Response","title":"Create an
-        incident response guide","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#101-create-an-incident-response-guide","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.1","name":"Azure_Security_Benchmark_v1.0_10.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident response guide","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#101-create-an-incident-response-guide","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.1","name":"Azure_Security_Benchmark_v1.0_10.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.2","category":"Incident Response","title":"Create an
-        incident scoring and prioritization procedure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#102-create-an-incident-scoring-and-prioritization-procedure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.2","name":"Azure_Security_Benchmark_v1.0_10.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident scoring and prioritization procedure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#102-create-an-incident-scoring-and-prioritization-procedure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.2","name":"Azure_Security_Benchmark_v1.0_10.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.3","category":"Incident Response","title":"Test security
-        response procedures","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises#111-conduct-regular-penetration-testing-of-your-azure-resources-and-ensure-remediation-of-all-critical-security-findings-within-60-days","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.3","name":"Azure_Security_Benchmark_v1.0_10.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        response procedures","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises#111-conduct-regular-penetration-testing-of-your-azure-resources-and-ensure-remediation-of-all-critical-security-findings-within-60-days","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.3","name":"Azure_Security_Benchmark_v1.0_10.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.4","category":"Incident Response","title":"Provide security
-        incident contact details and configure alert notifications for security incidents","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#103-test-security-response-procedures","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.4","name":"Azure_Security_Benchmark_v1.0_10.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident contact details and configure alert notifications for security incidents","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#103-test-security-response-procedures","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.4","name":"Azure_Security_Benchmark_v1.0_10.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.5","category":"Incident Response","title":"Incorporate
-        security alerts into your incident response system","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#104-provide-security-incident-contact-details-and-configure-alert-notifications-for-security-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.5","name":"Azure_Security_Benchmark_v1.0_10.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security alerts into your incident response system","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#104-provide-security-incident-contact-details-and-configure-alert-notifications-for-security-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.5","name":"Azure_Security_Benchmark_v1.0_10.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.6","category":"Incident Response","title":"Automate
-        the response to security alerts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#105-incorporate-security-alerts-into-your-incident-response-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.6","name":"Azure_Security_Benchmark_v1.0_10.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        the response to security alerts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#105-incorporate-security-alerts-into-your-incident-response-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.6","name":"Azure_Security_Benchmark_v1.0_10.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 11.1","category":"Penetration Tests and Red Team Exercises","title":"Conduct
         regular penetration testing of your Azure resources and ensure remediation
-        of all critical security findings within 60 days","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#106-automate-the-response-to-security-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_11.1","name":"Azure_Security_Benchmark_v1.0_11.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of all critical security findings within 60 days","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#106-automate-the-response-to-security-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_11.1","name":"Azure_Security_Benchmark_v1.0_11.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.1","category":"Logging and Monitoring","title":"Use approved
-        time synchronization sources","owner":"Microsoft","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#21-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.1","name":"Azure_Security_Benchmark_v1.0_2.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        time synchronization sources","owner":"Microsoft","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#21-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.1","name":"Azure_Security_Benchmark_v1.0_2.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.10","category":"Logging and Monitoring","title":"Enable
-        command-line audit logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#210-enable-command-line-audit-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.10","name":"Azure_Security_Benchmark_v1.0_2.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        command-line audit logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#210-enable-command-line-audit-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.10","name":"Azure_Security_Benchmark_v1.0_2.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.2","category":"Logging and Monitoring","title":"Configure
-        central security log management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#22-configure-central-security-log-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.2","name":"Azure_Security_Benchmark_v1.0_2.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        central security log management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#22-configure-central-security-log-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.2","name":"Azure_Security_Benchmark_v1.0_2.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.3","category":"Logging and Monitoring","title":"Enable
-        audit logging for Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#23-enable-audit-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.3","name":"Azure_Security_Benchmark_v1.0_2.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        audit logging for Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#23-enable-audit-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.3","name":"Azure_Security_Benchmark_v1.0_2.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.4","category":"Logging and Monitoring","title":"Collect
-        security logs from operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#24-collect-security-logs-from-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.4","name":"Azure_Security_Benchmark_v1.0_2.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security logs from operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#24-collect-security-logs-from-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.4","name":"Azure_Security_Benchmark_v1.0_2.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.5","category":"Logging and Monitoring","title":"Configure
-        security log storage retention","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#25-configure-security-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.5","name":"Azure_Security_Benchmark_v1.0_2.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log storage retention","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#25-configure-security-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.5","name":"Azure_Security_Benchmark_v1.0_2.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.6","category":"Logging and Monitoring","title":"Monitor
-        and review Logs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#26-monitor-and-review-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.6","name":"Azure_Security_Benchmark_v1.0_2.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and review Logs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#26-monitor-and-review-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.6","name":"Azure_Security_Benchmark_v1.0_2.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.7","category":"Logging and Monitoring","title":"Enable
-        alerts for anomalous activity","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#27-enable-alerts-for-anomalous-activity","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.7","name":"Azure_Security_Benchmark_v1.0_2.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        alerts for anomalous activity","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#27-enable-alerts-for-anomalous-activity","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.7","name":"Azure_Security_Benchmark_v1.0_2.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.8","category":"Logging and Monitoring","title":"Centralize
-        anti-malware logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#28-centralize-anti-malware-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.8","name":"Azure_Security_Benchmark_v1.0_2.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        anti-malware logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#28-centralize-anti-malware-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.8","name":"Azure_Security_Benchmark_v1.0_2.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.9","category":"Logging and Monitoring","title":"Enable
-        DNS query logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#29-enable-dns-query-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.9","name":"Azure_Security_Benchmark_v1.0_2.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        DNS query logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#29-enable-dns-query-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.9","name":"Azure_Security_Benchmark_v1.0_2.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.1","category":"Identity and Access Control","title":"Maintain
-        an inventory of administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#31-maintain-an-inventory-of-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.1","name":"Azure_Security_Benchmark_v1.0_3.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        an inventory of administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#31-maintain-an-inventory-of-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.1","name":"Azure_Security_Benchmark_v1.0_3.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.10","category":"Identity and Access Control","title":"Regularly
-        review and reconcile user access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#310-regularly-review-and-reconcile-user-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.10","name":"Azure_Security_Benchmark_v1.0_3.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        review and reconcile user access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#310-regularly-review-and-reconcile-user-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.10","name":"Azure_Security_Benchmark_v1.0_3.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.11","category":"Identity and Access Control","title":"Monitor
-        attempts to access deactivated accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#311-monitor-attempts-to-access-deactivated-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.11","name":"Azure_Security_Benchmark_v1.0_3.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        attempts to access deactivated accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#311-monitor-attempts-to-access-deactivated-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.11","name":"Azure_Security_Benchmark_v1.0_3.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.12","category":"Identity and Access Control","title":"Alert
-        on account login behavior deviation","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#312-alert-on-account-login-behavior-deviation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.12","name":"Azure_Security_Benchmark_v1.0_3.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        on account login behavior deviation","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#312-alert-on-account-login-behavior-deviation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.12","name":"Azure_Security_Benchmark_v1.0_3.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.13","category":"Identity and Access Control","title":"Provide
-        Microsoft with access to relevant customer data during support scenarios","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#313-provide-microsoft-with-access-to-relevant-customer-data-during-support-scenarios","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.13","name":"Azure_Security_Benchmark_v1.0_3.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Microsoft with access to relevant customer data during support scenarios","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#313-provide-microsoft-with-access-to-relevant-customer-data-during-support-scenarios","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.13","name":"Azure_Security_Benchmark_v1.0_3.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.2","category":"Identity and Access Control","title":"Change
-        default passwords where applicable","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#32-change-default-passwords-where-applicable","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.2","name":"Azure_Security_Benchmark_v1.0_3.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        default passwords where applicable","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#32-change-default-passwords-where-applicable","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.2","name":"Azure_Security_Benchmark_v1.0_3.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.3","category":"Identity and Access Control","title":"Use
-        dedicated administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#33-use-dedicated-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.3","name":"Azure_Security_Benchmark_v1.0_3.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        dedicated administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#33-use-dedicated-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.3","name":"Azure_Security_Benchmark_v1.0_3.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.4","category":"Identity and Access Control","title":"Use
-        single sign-on (SSO) with Azure Active Directory","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#34-use-single-sign-on-sso-with-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.4","name":"Azure_Security_Benchmark_v1.0_3.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        single sign-on (SSO) with Azure Active Directory","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#34-use-single-sign-on-sso-with-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.4","name":"Azure_Security_Benchmark_v1.0_3.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.5","category":"Identity and Access Control","title":"Use
-        multi-factor authentication for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#35-use-multi-factor-authentication-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.5","name":"Azure_Security_Benchmark_v1.0_3.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        multi-factor authentication for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#35-use-multi-factor-authentication-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.5","name":"Azure_Security_Benchmark_v1.0_3.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.6","category":"Identity and Access Control","title":"Use
         dedicated machines (Privileged Access Workstations) for all administrative
-        tasks","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#36-use-dedicated-machines-privileged-access-workstations-for-all-administrative-tasks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.6","name":"Azure_Security_Benchmark_v1.0_3.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        tasks","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#36-use-dedicated-machines-privileged-access-workstations-for-all-administrative-tasks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.6","name":"Azure_Security_Benchmark_v1.0_3.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.7","category":"Identity and Access Control","title":"Log
-        and alert on suspicious activity from administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#37-log-and-alert-on-suspicious-activity-from-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.7","name":"Azure_Security_Benchmark_v1.0_3.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and alert on suspicious activity from administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#37-log-and-alert-on-suspicious-activity-from-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.7","name":"Azure_Security_Benchmark_v1.0_3.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.8","category":"Identity and Access Control","title":"Manage
-        Azure resources from only approved locations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#38-manage-azure-resources-from-only-approved-locations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.8","name":"Azure_Security_Benchmark_v1.0_3.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure resources from only approved locations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#38-manage-azure-resources-from-only-approved-locations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.8","name":"Azure_Security_Benchmark_v1.0_3.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.9","category":"Identity and Access Control","title":"Use
-        Azure Active Directory","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#39-use-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.9","name":"Azure_Security_Benchmark_v1.0_3.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Active Directory","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#39-use-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.9","name":"Azure_Security_Benchmark_v1.0_3.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.1","category":"Data Protection","title":"Maintain an
-        inventory of sensitive Information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#41-maintain-an-inventory-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.1","name":"Azure_Security_Benchmark_v1.0_4.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        inventory of sensitive Information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#41-maintain-an-inventory-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.1","name":"Azure_Security_Benchmark_v1.0_4.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.2","category":"Data Protection","title":"Isolate systems
-        storing or processing sensitive information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#42-isolate-systems-storing-or-processing-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.2","name":"Azure_Security_Benchmark_v1.0_4.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        storing or processing sensitive information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#42-isolate-systems-storing-or-processing-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.2","name":"Azure_Security_Benchmark_v1.0_4.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.3","category":"Data Protection","title":"Monitor and
-        block unauthorized transfer of sensitive information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#43-monitor-and-block-unauthorized-transfer-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.3","name":"Azure_Security_Benchmark_v1.0_4.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        block unauthorized transfer of sensitive information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#43-monitor-and-block-unauthorized-transfer-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.3","name":"Azure_Security_Benchmark_v1.0_4.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.4","category":"Data Protection","title":"Encrypt all
-        sensitive information in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#44-encrypt-all-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.4","name":"Azure_Security_Benchmark_v1.0_4.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        sensitive information in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#44-encrypt-all-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.4","name":"Azure_Security_Benchmark_v1.0_4.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.5","category":"Data Protection","title":"Use an active
-        discovery tool to identify sensitive data","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#45-use-an-active-discovery-tool-to-identify-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.5","name":"Azure_Security_Benchmark_v1.0_4.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        discovery tool to identify sensitive data","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#45-use-an-active-discovery-tool-to-identify-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.5","name":"Azure_Security_Benchmark_v1.0_4.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.6","category":"Data Protection","title":"Use Azure RBAC
-        to control access to resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#46-use-azure-rbac-to-control-access-to-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.6","name":"Azure_Security_Benchmark_v1.0_4.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to control access to resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#46-use-azure-rbac-to-control-access-to-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.6","name":"Azure_Security_Benchmark_v1.0_4.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.7","category":"Data Protection","title":"Use host-based
-        data loss prevention to enforce access control","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#47-use-host-based-data-loss-prevention-to-enforce-access-control","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.7","name":"Azure_Security_Benchmark_v1.0_4.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data loss prevention to enforce access control","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#47-use-host-based-data-loss-prevention-to-enforce-access-control","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.7","name":"Azure_Security_Benchmark_v1.0_4.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.8","category":"Data Protection","title":"Encrypt sensitive
-        information at rest","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#48-encrypt-sensitive-information-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.8","name":"Azure_Security_Benchmark_v1.0_4.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        information at rest","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#48-encrypt-sensitive-information-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.8","name":"Azure_Security_Benchmark_v1.0_4.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.9","category":"Data Protection","title":"Log and alert
-        on changes to critical Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#49-log-and-alert-on-changes-to-critical-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.9","name":"Azure_Security_Benchmark_v1.0_4.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        on changes to critical Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#49-log-and-alert-on-changes-to-critical-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.9","name":"Azure_Security_Benchmark_v1.0_4.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.1","category":"Vulnerability Management","title":"Run
-        automated vulnerability scanning tools","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.1","name":"Azure_Security_Benchmark_v1.0_5.1","type":"Microsoft.PolicyInsights/policyMetadata"}],"nextLink":"https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata?api-version=2019-10-01&$skipToken=0w7ydLGqS_QNC3L0zClzCc-tcHKEAVtb5aAQK0Mj5ZAgZytDIwMDZc_gMCsjZU9XfyszU1NTQ2W3AGcrxyRXV5gO44piGNMWAA"}'
+        automated vulnerability scanning tools","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.1","name":"Azure_Security_Benchmark_v1.0_5.1","type":"Microsoft.PolicyInsights/policyMetadata"}],"nextLink":"https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata?api-version=2019-10-01&$skipToken=0w7ydLGqS_QNC3L0zClzCc-tcHKEAVtb5aAQK0Mj5ZAgZytDIwMDZc_gMCsjZU9XfyszU1NTQ2W3AGcrxyRXV5gO44piGNMWAA"}'
     headers:
       cache-control:
       - no-cache
@@ -3150,79 +3150,79 @@ interactions:
   response:
     body:
       string: '{"value":[{"properties":{"metadataId":"Azure Security Benchmark 5.2","category":"Vulnerability
-        Management","title":"Deploy automated operating system patch management solution","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#52-deploy-automated-operating-system-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.2","name":"Azure_Security_Benchmark_v1.0_5.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Management","title":"Deploy automated operating system patch management solution","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#52-deploy-automated-operating-system-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.2","name":"Azure_Security_Benchmark_v1.0_5.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.3","category":"Vulnerability Management","title":"Deploy
-        automated third-party software patch management solution","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#53-deploy-automated-third-party-software-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.3","name":"Azure_Security_Benchmark_v1.0_5.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated third-party software patch management solution","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#53-deploy-automated-third-party-software-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.3","name":"Azure_Security_Benchmark_v1.0_5.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.4","category":"Vulnerability Management","title":"Compare
-        back-to-back vulnerability scans","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#54-compare-back-to-back-vulnerability-scans","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.4","name":"Azure_Security_Benchmark_v1.0_5.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        back-to-back vulnerability scans","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#54-compare-back-to-back-vulnerability-scans","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.4","name":"Azure_Security_Benchmark_v1.0_5.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.5","category":"Vulnerability Management","title":"Use
-        a risk-rating process to prioritize the remediation of discovered vulnerabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#55-use-a-risk-rating-process-to-prioritize-the-remediation-of-discovered-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.5","name":"Azure_Security_Benchmark_v1.0_5.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        a risk-rating process to prioritize the remediation of discovered vulnerabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#55-use-a-risk-rating-process-to-prioritize-the-remediation-of-discovered-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.5","name":"Azure_Security_Benchmark_v1.0_5.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.1","category":"Inventory and Asset Management","title":"Use
-        Azure Asset Discovery","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#61-use-azure-asset-discovery","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.1","name":"Azure_Security_Benchmark_v1.0_6.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Asset Discovery","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#61-use-azure-asset-discovery","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.1","name":"Azure_Security_Benchmark_v1.0_6.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.10","category":"Inventory and Asset Management","title":"Implement
-        approved application list","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#610-implement-approved-application-list","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.10","name":"Azure_Security_Benchmark_v1.0_6.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved application list","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#610-implement-approved-application-list","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.10","name":"Azure_Security_Benchmark_v1.0_6.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.11","category":"Inventory and Asset Management","title":"Limit
-        users'' ability to interact with AzureResources Manager via scripts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#611-limit-users-ability-to-interact-with-azure-resource-manager-via-scripts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.11","name":"Azure_Security_Benchmark_v1.0_6.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        users'' ability to interact with AzureResources Manager via scripts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#611-limit-users-ability-to-interact-with-azure-resource-manager-via-scripts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.11","name":"Azure_Security_Benchmark_v1.0_6.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.12","category":"Inventory and Asset Management","title":"Limit
-        users'' ability to execute scripts within compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#612-limit-users-ability-to-execute-scripts-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.12","name":"Azure_Security_Benchmark_v1.0_6.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        users'' ability to execute scripts within compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#612-limit-users-ability-to-execute-scripts-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.12","name":"Azure_Security_Benchmark_v1.0_6.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.13","category":"Inventory and Asset Management","title":"Physically
-        or logically segregate high risk applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#613-physically-or-logically-segregate-high-risk-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.13","name":"Azure_Security_Benchmark_v1.0_6.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        or logically segregate high risk applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#613-physically-or-logically-segregate-high-risk-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.13","name":"Azure_Security_Benchmark_v1.0_6.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.2","category":"Inventory and Asset Management","title":"Maintain
-        asset metadata","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#62-maintain-asset-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.2","name":"Azure_Security_Benchmark_v1.0_6.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        asset metadata","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#62-maintain-asset-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.2","name":"Azure_Security_Benchmark_v1.0_6.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.3","category":"Inventory and Asset Management","title":"Delete
-        unauthorized Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#63-delete-unauthorized-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.3","name":"Azure_Security_Benchmark_v1.0_6.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unauthorized Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#63-delete-unauthorized-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.3","name":"Azure_Security_Benchmark_v1.0_6.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.4","category":"Inventory and Asset Management","title":"Maintain
-        an inventory of approved Azure resources and software titles","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#64-maintain-an-inventory-of-approved-azure-resources-and-software-titles","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.4","name":"Azure_Security_Benchmark_v1.0_6.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        an inventory of approved Azure resources and software titles","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#64-maintain-an-inventory-of-approved-azure-resources-and-software-titles","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.4","name":"Azure_Security_Benchmark_v1.0_6.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.5","category":"Inventory and Asset Management","title":"Monitor
-        for unapproved Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#65-monitor-for-unapproved-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.5","name":"Azure_Security_Benchmark_v1.0_6.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        for unapproved Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#65-monitor-for-unapproved-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.5","name":"Azure_Security_Benchmark_v1.0_6.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.6","category":"Inventory and Asset Management","title":"Monitor
-        for unapproved software applications within compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#66-monitor-for-unapproved-software-applications-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.6","name":"Azure_Security_Benchmark_v1.0_6.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        for unapproved software applications within compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#66-monitor-for-unapproved-software-applications-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.6","name":"Azure_Security_Benchmark_v1.0_6.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.7","category":"Inventory and Asset Management","title":"Remove
-        unapproved Azure resources and software applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#67-remove-unapproved-azure-resources-and-software-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.7","name":"Azure_Security_Benchmark_v1.0_6.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unapproved Azure resources and software applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#67-remove-unapproved-azure-resources-and-software-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.7","name":"Azure_Security_Benchmark_v1.0_6.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.8","category":"Inventory and Asset Management","title":"Use
-        only approved applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#68-use-only-approved-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.8","name":"Azure_Security_Benchmark_v1.0_6.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        only approved applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#68-use-only-approved-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.8","name":"Azure_Security_Benchmark_v1.0_6.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.9","category":"Inventory and Asset Management","title":"Use
-        only approved Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#69-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.9","name":"Azure_Security_Benchmark_v1.0_6.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        only approved Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#69-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.9","name":"Azure_Security_Benchmark_v1.0_6.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.1","category":"Secure Configuration","title":"Establish
-        secure configurations for all Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#71-establish-secure-configurations-for-all-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.1","name":"Azure_Security_Benchmark_v1.0_7.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for all Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#71-establish-secure-configurations-for-all-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.1","name":"Azure_Security_Benchmark_v1.0_7.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.10","category":"Secure Configuration","title":"Implement
-        automated configuration monitoring for operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#710-implement-automated-configuration-monitoring-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.10","name":"Azure_Security_Benchmark_v1.0_7.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated configuration monitoring for operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#710-implement-automated-configuration-monitoring-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.10","name":"Azure_Security_Benchmark_v1.0_7.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.11","category":"Secure Configuration","title":"Manage
-        Azure secrets securely","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#711-manage-azure-secrets-securely","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.11","name":"Azure_Security_Benchmark_v1.0_7.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure secrets securely","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#711-manage-azure-secrets-securely","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.11","name":"Azure_Security_Benchmark_v1.0_7.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.12","category":"Secure Configuration","title":"Manage
-        identities securely and automatically","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#712-manage-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.12","name":"Azure_Security_Benchmark_v1.0_7.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identities securely and automatically","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#712-manage-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.12","name":"Azure_Security_Benchmark_v1.0_7.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.13","category":"Secure Configuration","title":"Eliminate
-        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#713-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.13","name":"Azure_Security_Benchmark_v1.0_7.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#713-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.13","name":"Azure_Security_Benchmark_v1.0_7.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.2","category":"Secure Configuration","title":"Establish
-        secure operating system configurations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#72-establish-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.2","name":"Azure_Security_Benchmark_v1.0_7.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure operating system configurations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#72-establish-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.2","name":"Azure_Security_Benchmark_v1.0_7.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.3","category":"Secure Configuration","title":"Maintain
-        secure Azure resource configurations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#73-maintain-secure-azure-resource-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.3","name":"Azure_Security_Benchmark_v1.0_7.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure Azure resource configurations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#73-maintain-secure-azure-resource-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.3","name":"Azure_Security_Benchmark_v1.0_7.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.4","category":"Secure Configuration","title":"Maintain
-        secure operating system configurations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#74-maintain-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.4","name":"Azure_Security_Benchmark_v1.0_7.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure operating system configurations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#74-maintain-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.4","name":"Azure_Security_Benchmark_v1.0_7.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.5","category":"Secure Configuration","title":"Securely
-        store configuration of Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#75-securely-store-configuration-of-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.5","name":"Azure_Security_Benchmark_v1.0_7.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store configuration of Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#75-securely-store-configuration-of-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.5","name":"Azure_Security_Benchmark_v1.0_7.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.6","category":"Secure Configuration","title":"Securely
-        store custom operating system images","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#76-securely-store-custom-operating-system-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.6","name":"Azure_Security_Benchmark_v1.0_7.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store custom operating system images","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#76-securely-store-custom-operating-system-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.6","name":"Azure_Security_Benchmark_v1.0_7.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.7","category":"Secure Configuration","title":"Deploy
-        system configuration management tools","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#77-deploy-system-configuration-management-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.7","name":"Azure_Security_Benchmark_v1.0_7.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system configuration management tools","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#77-deploy-system-configuration-management-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.7","name":"Azure_Security_Benchmark_v1.0_7.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.8","category":"Secure Configuration","title":"Deploy
-        system configuration management tools for operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#78-deploy-system-configuration-management-tools-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.8","name":"Azure_Security_Benchmark_v1.0_7.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system configuration management tools for operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#78-deploy-system-configuration-management-tools-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.8","name":"Azure_Security_Benchmark_v1.0_7.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.9","category":"Secure Configuration","title":"Implement
-        automated configuration monitoring for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#79-implement-automated-configuration-monitoring-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.9","name":"Azure_Security_Benchmark_v1.0_7.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated configuration monitoring for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#79-implement-automated-configuration-monitoring-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.9","name":"Azure_Security_Benchmark_v1.0_7.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.1","category":"Malware Defense","title":"Use centrally
-        managed anti-malware software","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#81-use-centrally-managed-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.1","name":"Azure_Security_Benchmark_v1.0_8.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        managed anti-malware software","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#81-use-centrally-managed-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.1","name":"Azure_Security_Benchmark_v1.0_8.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.2","category":"Malware Defense","title":"Pre-scan files
-        to be uploaded to non-compute Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#82-pre-scan-files-to-be-uploaded-to-non-compute-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.2","name":"Azure_Security_Benchmark_v1.0_8.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to be uploaded to non-compute Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#82-pre-scan-files-to-be-uploaded-to-non-compute-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.2","name":"Azure_Security_Benchmark_v1.0_8.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.3","category":"Malware Defense","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#83-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.3","name":"Azure_Security_Benchmark_v1.0_8.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#83-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.3","name":"Azure_Security_Benchmark_v1.0_8.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.1","category":"Data Recovery","title":"Ensure regular
-        automated back ups","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#91-ensure-regular-automated-back-ups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.1","name":"Azure_Security_Benchmark_v1.0_9.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated back ups","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#91-ensure-regular-automated-back-ups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.1","name":"Azure_Security_Benchmark_v1.0_9.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.2","category":"Data Recovery","title":"Perform complete
-        system backups and backup any customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#92-perform-complete-system-backups-and-backup-any-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.2","name":"Azure_Security_Benchmark_v1.0_9.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system backups and backup any customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#92-perform-complete-system-backups-and-backup-any-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.2","name":"Azure_Security_Benchmark_v1.0_9.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.3","category":"Data Recovery","title":"Validate all backups
-        including customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#93-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.3","name":"Azure_Security_Benchmark_v1.0_9.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        including customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#93-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.3","name":"Azure_Security_Benchmark_v1.0_9.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.4","category":"Data Recovery","title":"Ensure protection
-        of backups and customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#94-ensure-protection-of-backups-and-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.4","name":"Azure_Security_Benchmark_v1.0_9.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
+        of backups and customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#94-ensure-protection-of-backups-and-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.4","name":"Azure_Security_Benchmark_v1.0_9.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
         Microsoft Azure Foundations Benchmark recommendation 1.1","category":"Identity
         and Access Management","title":"Ensure that multi-factor authentication is
         enabled for all privileged users","owner":"Customer","additionalContentUrl":"https://www.cisecurity.org/benchmark/azure/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.1.0_1.1","name":"CIS_Azure_1.1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
@@ -6324,141 +6324,141 @@ interactions:
         organization has implemented technical means to ensure covered information
         is stored in organization-specified locations.","owner":"Customer","additionalContentUrl":"","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/hipaa-19245.06d2Organizational.2-06.d","name":"hipaa-19245.06d2Organizational.2-06.d","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-1","category":"Asset Management","title":"Ensure security
-        team has visibility into risks for assets","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-1-ensure-security-team-has-visibility-into-risks-for-assets","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-1","name":"Azure_Security_Benchmark_v2.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        team has visibility into risks for assets","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-1-ensure-security-team-has-visibility-into-risks-for-assets","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-1","name":"Azure_Security_Benchmark_v2.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-2","category":"Asset Management","title":"Ensure security
-        team has access to asset inventory and metadata","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-2-ensure-security-team-has-access-to-asset-inventory-and-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-2","name":"Azure_Security_Benchmark_v2.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        team has access to asset inventory and metadata","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-2-ensure-security-team-has-access-to-asset-inventory-and-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-2","name":"Azure_Security_Benchmark_v2.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-3","category":"Asset Management","title":"Use only approved
-        Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-3-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-3","name":"Azure_Security_Benchmark_v2.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-3-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-3","name":"Azure_Security_Benchmark_v2.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-4","category":"Asset Management","title":"Ensure security
-        of asset lifecycle management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-4-ensure-security-of-asset-lifecycle-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-4","name":"Azure_Security_Benchmark_v2.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of asset lifecycle management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-4-ensure-security-of-asset-lifecycle-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-4","name":"Azure_Security_Benchmark_v2.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-5","category":"Asset Management","title":"Limit users''
-        ability to interact with Azure Resource Manager","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-5-limit-users-ability-to-interact-with-azure-resource-manager","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-5","name":"Azure_Security_Benchmark_v2.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        ability to interact with Azure Resource Manager","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-5-limit-users-ability-to-interact-with-azure-resource-manager","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-5","name":"Azure_Security_Benchmark_v2.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-6","category":"Asset Management","title":"Use only approved
-        applications in compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-6-use-only-approved-applications-in-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-6","name":"Azure_Security_Benchmark_v2.0_AM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        applications in compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-6-use-only-approved-applications-in-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-6","name":"Azure_Security_Benchmark_v2.0_AM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-1","category":"Backup and Recovery","title":"Ensure
-        regular automated backups","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-1-ensure-regular-automated-backups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-1","name":"Azure_Security_Benchmark_v2.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular automated backups","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-1-ensure-regular-automated-backups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-1","name":"Azure_Security_Benchmark_v2.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-2","category":"Backup and Recovery","title":"Encrypt
-        backup data","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-2-encrypt-backup-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-2","name":"Azure_Security_Benchmark_v2.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup data","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-2-encrypt-backup-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-2","name":"Azure_Security_Benchmark_v2.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-3","category":"Backup and Recovery","title":"Validate
-        all backups including customer-managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-3-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-3","name":"Azure_Security_Benchmark_v2.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        all backups including customer-managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-3-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-3","name":"Azure_Security_Benchmark_v2.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-4","category":"Backup and Recovery","title":"Mitigate
-        risk of lost keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-4-mitigate-risk-of-lost-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-4","name":"Azure_Security_Benchmark_v2.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        risk of lost keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-4-mitigate-risk-of-lost-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-4","name":"Azure_Security_Benchmark_v2.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-1","category":"Data Protection","title":"Discovery,
-        classify and label sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-1-discovery-classify-and-label-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-1","name":"Azure_Security_Benchmark_v2.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        classify and label sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-1-discovery-classify-and-label-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-1","name":"Azure_Security_Benchmark_v2.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-2","category":"Data Protection","title":"Protect sensitive
-        data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-2-protect-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-2","name":"Azure_Security_Benchmark_v2.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-2-protect-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-2","name":"Azure_Security_Benchmark_v2.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-3","category":"Data Protection","title":"Monitor for
-        unauthorized transfer of sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-3-monitor-for-unauthorized-transfer-of-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-3","name":"Azure_Security_Benchmark_v2.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unauthorized transfer of sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-3-monitor-for-unauthorized-transfer-of-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-3","name":"Azure_Security_Benchmark_v2.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-4","category":"Data Protection","title":"Encrypt sensitive
-        information in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-4-encrypt-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-4","name":"Azure_Security_Benchmark_v2.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        information in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-4-encrypt-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-4","name":"Azure_Security_Benchmark_v2.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-5","category":"Data Protection","title":"Encrypt sensitive
-        data at rest","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-5-encrypt-sensitive-data-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-5","name":"Azure_Security_Benchmark_v2.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data at rest","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-5-encrypt-sensitive-data-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-5","name":"Azure_Security_Benchmark_v2.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-1","category":"Endpoint Security","title":"Use Endpoint
-        Detection and Response (EDR)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-1-use-endpoint-detection-and-response-edr","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-1","name":"Azure_Security_Benchmark_v2.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Detection and Response (EDR)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-1-use-endpoint-detection-and-response-edr","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-1","name":"Azure_Security_Benchmark_v2.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-2","category":"Endpoint Security","title":"Use centrally
-        managed modern anti-malware software","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-2-use-centrally-managed-modern-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-2","name":"Azure_Security_Benchmark_v2.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        managed modern anti-malware software","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-2-use-centrally-managed-modern-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-2","name":"Azure_Security_Benchmark_v2.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-3","category":"Endpoint Security","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-3-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-3","name":"Azure_Security_Benchmark_v2.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-3-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-3","name":"Azure_Security_Benchmark_v2.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-1","category":"Governance and Strategy","title":"Define
-        asset management and data protection strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-1-define-asset-management-and-data-protection-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-1","name":"Azure_Security_Benchmark_v2.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        asset management and data protection strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-1-define-asset-management-and-data-protection-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-1","name":"Azure_Security_Benchmark_v2.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-2","category":"Governance and Strategy","title":"Define
-        enterprise segmentation strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-2-define-enterprise-segmentation-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-2","name":"Azure_Security_Benchmark_v2.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enterprise segmentation strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-2-define-enterprise-segmentation-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-2","name":"Azure_Security_Benchmark_v2.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-3","category":"Governance and Strategy","title":"Define
-        security posture management strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-3-define-security-posture-management-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-3","name":"Azure_Security_Benchmark_v2.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security posture management strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-3-define-security-posture-management-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-3","name":"Azure_Security_Benchmark_v2.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-4","category":"Governance and Strategy","title":"Align
-        organization roles, responsibilities, and accountabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-4-align-organization-roles-responsibilities-and-accountabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-4","name":"Azure_Security_Benchmark_v2.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        organization roles, responsibilities, and accountabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-4-align-organization-roles-responsibilities-and-accountabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-4","name":"Azure_Security_Benchmark_v2.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-5","category":"Governance and Strategy","title":"Define
-        network security strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-5-define-network-security-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-5","name":"Azure_Security_Benchmark_v2.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network security strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-5-define-network-security-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-5","name":"Azure_Security_Benchmark_v2.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-6","category":"Governance and Strategy","title":"Define
-        identity and privileged access strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-6-define-identity-and-privileged-access-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-6","name":"Azure_Security_Benchmark_v2.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and privileged access strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-6-define-identity-and-privileged-access-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-6","name":"Azure_Security_Benchmark_v2.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-7","category":"Governance and Strategy","title":"Define
-        logging and threat response strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-7-define-logging-and-threat-response-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-7","name":"Azure_Security_Benchmark_v2.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging and threat response strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-7-define-logging-and-threat-response-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-7","name":"Azure_Security_Benchmark_v2.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-8","category":"Governance and Strategy","title":"Define
-        backup and recovery strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-8-define-backup-and-recovery-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-8","name":"Azure_Security_Benchmark_v2.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup and recovery strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-8-define-backup-and-recovery-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-8","name":"Azure_Security_Benchmark_v2.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-1","category":"Identity Management","title":"Standardize
-        Azure Active Directory as the central identity and authentication system","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-1-standardize-azure-active-directory-as-the-central-identity-and-authentication-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-1","name":"Azure_Security_Benchmark_v2.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Active Directory as the central identity and authentication system","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-1-standardize-azure-active-directory-as-the-central-identity-and-authentication-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-1","name":"Azure_Security_Benchmark_v2.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-2","category":"Identity Management","title":"Manage
-        application identities securely and automatically","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-2-manage-application-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-2","name":"Azure_Security_Benchmark_v2.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application identities securely and automatically","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-2-manage-application-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-2","name":"Azure_Security_Benchmark_v2.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-3","category":"Identity Management","title":"Use Azure
-        AD single sign-on (SSO) for application access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-3-use-azure-ad-single-sign-on-sso-for-application-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-3","name":"Azure_Security_Benchmark_v2.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        AD single sign-on (SSO) for application access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-3-use-azure-ad-single-sign-on-sso-for-application-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-3","name":"Azure_Security_Benchmark_v2.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-4","category":"Identity Management","title":"Use strong
-        authentication controls for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-4","name":"Azure_Security_Benchmark_v2.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        authentication controls for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-4","name":"Azure_Security_Benchmark_v2.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-5","category":"Identity Management","title":"Monitor
-        and alert on account anomalies","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-5-monitor-and-alert-on-account-anomalies","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-5","name":"Azure_Security_Benchmark_v2.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and alert on account anomalies","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-5-monitor-and-alert-on-account-anomalies","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-5","name":"Azure_Security_Benchmark_v2.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-6","category":"Identity Management","title":"Restrict
-        Azure resource access based on conditions","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-6-restrict-azure-resource-access-based-on-conditions","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-6","name":"Azure_Security_Benchmark_v2.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure resource access based on conditions","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-6-restrict-azure-resource-access-based-on-conditions","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-6","name":"Azure_Security_Benchmark_v2.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-7","category":"Identity Management","title":"Eliminate
-        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-7-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-7","name":"Azure_Security_Benchmark_v2.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-7-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-7","name":"Azure_Security_Benchmark_v2.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-8","category":"Identity Management","title":"Secure
-        user access to legacy applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-8-secure-user-access-to-legacy-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-8","name":"Azure_Security_Benchmark_v2.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        user access to legacy applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-8-secure-user-access-to-legacy-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-8","name":"Azure_Security_Benchmark_v2.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-1","category":"Incident Response","title":"Preparation
-        - update incident response process for Azure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-1-preparation--update-incident-response-process-for-azure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-1","name":"Azure_Security_Benchmark_v2.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - update incident response process for Azure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-1-preparation--update-incident-response-process-for-azure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-1","name":"Azure_Security_Benchmark_v2.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-2","category":"Incident Response","title":"Preparation
-        - setup incident notification","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-2-preparation--setup-incident-notification","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-2","name":"Azure_Security_Benchmark_v2.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - setup incident notification","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-2-preparation--setup-incident-notification","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-2","name":"Azure_Security_Benchmark_v2.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-3","category":"Incident Response","title":"Detection
-        and analysis - create incidents based on high quality alerts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-3-detection-and-analysis--create-incidents-based-on-high-quality-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-3","name":"Azure_Security_Benchmark_v2.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - create incidents based on high quality alerts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-3-detection-and-analysis--create-incidents-based-on-high-quality-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-3","name":"Azure_Security_Benchmark_v2.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-4","category":"Incident Response","title":"Detection
-        and analysis - investigate an incident","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-4-detection-and-analysis--investigate-an-incident","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-4","name":"Azure_Security_Benchmark_v2.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - investigate an incident","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-4-detection-and-analysis--investigate-an-incident","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-4","name":"Azure_Security_Benchmark_v2.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-5","category":"Incident Response","title":"Detection
-        and analysis - prioritize incidents","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-5-detection-and-analysis--prioritize-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-5","name":"Azure_Security_Benchmark_v2.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - prioritize incidents","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-5-detection-and-analysis--prioritize-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-5","name":"Azure_Security_Benchmark_v2.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-6","category":"Incident Response","title":"Containment,
-        eradication and recovery - automate the incident handling","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-6-containment-eradication-and-recovery--automate-the-incident-handling","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-6","name":"Azure_Security_Benchmark_v2.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        eradication and recovery - automate the incident handling","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-6-containment-eradication-and-recovery--automate-the-incident-handling","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-6","name":"Azure_Security_Benchmark_v2.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-1","category":"Logging and Threat Detection","title":"Enable
-        threat detection for Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-1-enable-threat-detection-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-1","name":"Azure_Security_Benchmark_v2.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-1-enable-threat-detection-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-1","name":"Azure_Security_Benchmark_v2.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-2","category":"Logging and Threat Detection","title":"Enable
-        threat detection for Azure identity and access management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-2-enable-threat-detection-for-azure-identity-and-access-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-2","name":"Azure_Security_Benchmark_v2.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for Azure identity and access management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-2-enable-threat-detection-for-azure-identity-and-access-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-2","name":"Azure_Security_Benchmark_v2.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-3","category":"Logging and Threat Detection","title":"Enable
-        logging for Azure network activities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-3-enable-logging-for-azure-network-activities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-3","name":"Azure_Security_Benchmark_v2.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for Azure network activities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-3-enable-logging-for-azure-network-activities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-3","name":"Azure_Security_Benchmark_v2.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-4","category":"Logging and Threat Detection","title":"Enable
-        logging for Azure resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-4","name":"Azure_Security_Benchmark_v2.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for Azure resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-4","name":"Azure_Security_Benchmark_v2.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-5","category":"Logging and Threat Detection","title":"Centralize
-        security log management and analysis","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-5-centralize-security-log-management-and-analysis","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-5","name":"Azure_Security_Benchmark_v2.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log management and analysis","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-5-centralize-security-log-management-and-analysis","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-5","name":"Azure_Security_Benchmark_v2.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-6","category":"Logging and Threat Detection","title":"Configure
-        log storage retention","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-6-configure-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-6","name":"Azure_Security_Benchmark_v2.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log storage retention","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-6-configure-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-6","name":"Azure_Security_Benchmark_v2.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-7","category":"Logging and Threat Detection","title":"Use
-        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-7-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-7","name":"Azure_Security_Benchmark_v2.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-7-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-7","name":"Azure_Security_Benchmark_v2.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-1","category":"Network Security","title":"Implement
-        security for internal traffic","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-1-implement-security-for-internal-traffic","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-1","name":"Azure_Security_Benchmark_v2.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security for internal traffic","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-1-implement-security-for-internal-traffic","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-1","name":"Azure_Security_Benchmark_v2.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-2","category":"Network Security","title":"Connect private
-        networks together","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-2-connect-private-networks-together","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-2","name":"Azure_Security_Benchmark_v2.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        networks together","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-2-connect-private-networks-together","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-2","name":"Azure_Security_Benchmark_v2.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-3","category":"Network Security","title":"Establish
-        private network access to Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-3-establish-private-network-access-to-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-3","name":"Azure_Security_Benchmark_v2.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        private network access to Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-3-establish-private-network-access-to-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-3","name":"Azure_Security_Benchmark_v2.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-4","category":"Network Security","title":"Protect applications
-        and services from external network attacks","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-4-protect-applications-and-services-from-external-network-attacks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-4","name":"Azure_Security_Benchmark_v2.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and services from external network attacks","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-4-protect-applications-and-services-from-external-network-attacks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-4","name":"Azure_Security_Benchmark_v2.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-5","category":"Network Security","title":"Deploy intrusion
-        detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-5-deploy-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-5","name":"Azure_Security_Benchmark_v2.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-5-deploy-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-5","name":"Azure_Security_Benchmark_v2.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-6","category":"Network Security","title":"Simplify network
-        security rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-6-simplify-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-6","name":"Azure_Security_Benchmark_v2.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-6-simplify-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-6","name":"Azure_Security_Benchmark_v2.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-7","category":"Network Security","title":"Secure Domain
-        Name Service (DNS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-7-secure-domain-name-service-dns","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-7","name":"Azure_Security_Benchmark_v2.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Name Service (DNS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-7-secure-domain-name-service-dns","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-7","name":"Azure_Security_Benchmark_v2.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-1","category":"Privileged Access","title":"Protect and
-        limit highly privileged users","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-1-protect-and-limit-highly-privileged-users","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-1","name":"Azure_Security_Benchmark_v2.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        limit highly privileged users","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-1-protect-and-limit-highly-privileged-users","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-1","name":"Azure_Security_Benchmark_v2.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-2","category":"Privileged Access","title":"Restrict
-        administrative access to business-critical systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-2-restrict-administrative-access-to-business-critical-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-2","name":"Azure_Security_Benchmark_v2.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        administrative access to business-critical systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-2-restrict-administrative-access-to-business-critical-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-2","name":"Azure_Security_Benchmark_v2.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-3","category":"Privileged Access","title":"Review and
-        reconcile user access regularly","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-3-review-and-reconcile-user-access-regularly","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-3","name":"Azure_Security_Benchmark_v2.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        reconcile user access regularly","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-3-review-and-reconcile-user-access-regularly","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-3","name":"Azure_Security_Benchmark_v2.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-4","category":"Privileged Access","title":"Set up emergency
-        access in Azure AD","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-4-set-up-emergency-access-in-azure-ad","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-4","name":"Azure_Security_Benchmark_v2.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access in Azure AD","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-4-set-up-emergency-access-in-azure-ad","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-4","name":"Azure_Security_Benchmark_v2.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-5","category":"Privileged Access","title":"Automate
-        entitlement management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-5-automate-entitlement-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-5","name":"Azure_Security_Benchmark_v2.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        entitlement management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-5-automate-entitlement-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-5","name":"Azure_Security_Benchmark_v2.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-6","category":"Privileged Access","title":"Use privileged
-        access workstations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-6-use-privileged-access-workstations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-6","name":"Azure_Security_Benchmark_v2.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access workstations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-6-use-privileged-access-workstations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-6","name":"Azure_Security_Benchmark_v2.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-7","category":"Privileged Access","title":"Follow just
-        enough administration (least privilege principle)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-7","name":"Azure_Security_Benchmark_v2.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enough administration (least privilege principle)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-7","name":"Azure_Security_Benchmark_v2.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-8","category":"Privileged Access","title":"Choose approval
-        process for Microsoft support","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-8-choose-approval-process-for-microsoft-support","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-8","name":"Azure_Security_Benchmark_v2.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        process for Microsoft support","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-8-choose-approval-process-for-microsoft-support","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-8","name":"Azure_Security_Benchmark_v2.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-1","category":"Posture and Vulnerability Management","title":"Establish
-        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-1-establish-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-1","name":"Azure_Security_Benchmark_v2.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-1-establish-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-1","name":"Azure_Security_Benchmark_v2.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-2","category":"Posture and Vulnerability Management","title":"Sustain
-        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-2-sustain-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-2","name":"Azure_Security_Benchmark_v2.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-2-sustain-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-2","name":"Azure_Security_Benchmark_v2.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-3","category":"Posture and Vulnerability Management","title":"Establish
-        secure configurations for compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-3-establish-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-3","name":"Azure_Security_Benchmark_v2.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-3-establish-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-3","name":"Azure_Security_Benchmark_v2.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-4","category":"Posture and Vulnerability Management","title":"Sustain
-        secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-4-sustain-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-4","name":"Azure_Security_Benchmark_v2.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-4-sustain-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-4","name":"Azure_Security_Benchmark_v2.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-5","category":"Posture and Vulnerability Management","title":"Securely
-        store custom operating system and container images","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-5-securely-store-custom-operating-system-and-container-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-5","name":"Azure_Security_Benchmark_v2.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store custom operating system and container images","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-5-securely-store-custom-operating-system-and-container-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-5","name":"Azure_Security_Benchmark_v2.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-6","category":"Posture and Vulnerability Management","title":"Perform
-        software vulnerability assessments","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-6-perform-software-vulnerability-assessments","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-6","name":"Azure_Security_Benchmark_v2.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"}],"nextLink":"https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata?api-version=2019-10-01&$skipToken=0w7ydLGqS_QNC3L0zClzCc82dHaEAVtb5aAQKyND5ZAgZysjQwMDZc_gMCsjZU9XfyszU1NTQ2W3AGcrx5BQT5gO44piGNMWAA"}'
+        software vulnerability assessments","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-6-perform-software-vulnerability-assessments","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-6","name":"Azure_Security_Benchmark_v2.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"}],"nextLink":"https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata?api-version=2019-10-01&$skipToken=0w7ydLGqS_QNC3L0zClzCc82dHaEAVtb5aAQKyND5ZAgZysjQwMDZc_gMCsjZU9XfyszU1NTQ2W3AGcrx5BQT5gO44piGNMWAA"}'
     headers:
       cache-control:
       - no-cache
@@ -6506,9 +6506,9 @@ interactions:
     body:
       string: '{"value":[{"properties":{"metadataId":"Azure Security Benchmark PV-7","category":"Posture
         and Vulnerability Management","title":"Rapidly and automatically remediate
-        software vulnerabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-7-rapidly-and-automatically-remediate-software-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-7","name":"Azure_Security_Benchmark_v2.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software vulnerabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-7-rapidly-and-automatically-remediate-software-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-7","name":"Azure_Security_Benchmark_v2.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-8","category":"Posture and Vulnerability Management","title":"Conduct
-        regular attack simulation","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-8-conduct-regular-attack-simulation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-8","name":"Azure_Security_Benchmark_v2.0_PV-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
+        regular attack simulation","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-8-conduct-regular-attack-simulation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-8","name":"Azure_Security_Benchmark_v2.0_PV-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
         Microsoft Azure Foundations Benchmark recommendation 1.1","category":"Identity
         and Access Management","title":"Ensure that multi-factor authentication is
         enabled for all privileged users","owner":"Customer","additionalContentUrl":"https://www.cisecurity.org/benchmark/azure/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.2.0_1.1","name":"CIS_Azure_1.2.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
@@ -17898,141 +17898,141 @@ interactions:
         Appendix 5.8","category":"Control Measures on Cybersecurity","title":"Control
         Measures on Cybersecurity - Appendix 5.8","owner":"Customer","additionalContentUrl":"https://www.bnm.gov.my/banking-islamic-banking","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/RMiT_v1.0_Appendix_5.8","name":"RMiT_v1.0_Appendix_5.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-1","category":"Asset Management","title":"Track asset
-        inventory and their risks","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1","name":"Azure_Security_Benchmark_v3.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        inventory and their risks","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1","name":"Azure_Security_Benchmark_v3.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-2","category":"Asset Management","title":"Use only approved
-        services\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2","name":"Azure_Security_Benchmark_v3.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        services\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2","name":"Azure_Security_Benchmark_v3.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-3","category":"Asset Management","title":"Ensure security
-        of asset lifecycle management\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3","name":"Azure_Security_Benchmark_v3.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of asset lifecycle management\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3","name":"Azure_Security_Benchmark_v3.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-4","category":"Asset Management","title":"Limit access
-        to asset management\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4","name":"Azure_Security_Benchmark_v3.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to asset management\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4","name":"Azure_Security_Benchmark_v3.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-5","category":"Asset Management","title":"Use only approved
-        applications in virtual machine","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5","name":"Azure_Security_Benchmark_v3.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        applications in virtual machine","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5","name":"Azure_Security_Benchmark_v3.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-1","category":"Backup and Recovery","title":"Ensure
-        regular automated backups","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1","name":"Azure_Security_Benchmark_v3.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular automated backups","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1","name":"Azure_Security_Benchmark_v3.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-2","category":"Backup and Recovery","title":"Protect
-        backup and recovery data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2","name":"Azure_Security_Benchmark_v3.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup and recovery data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2","name":"Azure_Security_Benchmark_v3.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-3","category":"Backup and Recovery","title":"Monitor
-        backups","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3","name":"Azure_Security_Benchmark_v3.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backups","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3","name":"Azure_Security_Benchmark_v3.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-4","category":"Backup and Recovery","title":"Regularly
-        test backup","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4","name":"Azure_Security_Benchmark_v3.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        test backup","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4","name":"Azure_Security_Benchmark_v3.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-1","category":"Data Protection","title":"Discover, classify,
-        and label sensitive data\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1","name":"Azure_Security_Benchmark_v3.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and label sensitive data\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1","name":"Azure_Security_Benchmark_v3.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-2","category":"Data Protection","title":"Monitor anomalies
-        and threats targeting sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2","name":"Azure_Security_Benchmark_v3.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and threats targeting sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2","name":"Azure_Security_Benchmark_v3.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-3","category":"Data Protection","title":"Encrypt sensitive
-        data in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3","name":"Azure_Security_Benchmark_v3.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3","name":"Azure_Security_Benchmark_v3.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-4","category":"Data Protection","title":"Enable data
-        at rest encryption by default","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4","name":"Azure_Security_Benchmark_v3.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        at rest encryption by default","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4","name":"Azure_Security_Benchmark_v3.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-5","category":"Data Protection","title":"Use customer-managed
-        key option in data at rest encryption when required","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5","name":"Azure_Security_Benchmark_v3.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        key option in data at rest encryption when required","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5","name":"Azure_Security_Benchmark_v3.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-6","category":"Data Protection","title":"Use a secure
-        key management process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6","name":"Azure_Security_Benchmark_v3.0_DP-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        key management process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6","name":"Azure_Security_Benchmark_v3.0_DP-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-7","category":"Data Protection","title":"Use a secure
-        certificate management process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7","name":"Azure_Security_Benchmark_v3.0_DP-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        certificate management process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7","name":"Azure_Security_Benchmark_v3.0_DP-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-8","category":"Data Protection","title":"Ensure security
-        of key and certificate repository ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8","name":"Azure_Security_Benchmark_v3.0_DP-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of key and certificate repository ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8","name":"Azure_Security_Benchmark_v3.0_DP-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-1","category":"DevOps Security","title":"Conduct threat
-        modeling\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1","name":"Azure_Security_Benchmark_v3.0_DS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        modeling\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1","name":"Azure_Security_Benchmark_v3.0_DS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-2","category":"DevOps Security","title":"Ensure software
-        supply chain security","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2","name":"Azure_Security_Benchmark_v3.0_DS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        supply chain security","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2","name":"Azure_Security_Benchmark_v3.0_DS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-3","category":"DevOps Security","title":"Secure DevOps
-        infrastructure","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3","name":"Azure_Security_Benchmark_v3.0_DS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        infrastructure","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3","name":"Azure_Security_Benchmark_v3.0_DS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-4","category":"DevOps Security","title":"Integrate static
-        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4","name":"Azure_Security_Benchmark_v3.0_DS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4","name":"Azure_Security_Benchmark_v3.0_DS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-5","category":"DevOps Security","title":"Integrate dynamic
-        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5","name":"Azure_Security_Benchmark_v3.0_DS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5","name":"Azure_Security_Benchmark_v3.0_DS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-6","category":"DevOps Security","title":"Enforce security
-        of workload throughout DevOps lifecycle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6","name":"Azure_Security_Benchmark_v3.0_DS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of workload throughout DevOps lifecycle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6","name":"Azure_Security_Benchmark_v3.0_DS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-7","category":"DevOps Security","title":"Enable logging
-        and monitoring in DevOps","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7","name":"Azure_Security_Benchmark_v3.0_DS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and monitoring in DevOps","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7","name":"Azure_Security_Benchmark_v3.0_DS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-1","category":"Endpoint Security","title":"Use Endpoint
-        Detection and Response (EDR)","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1","name":"Azure_Security_Benchmark_v3.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Detection and Response (EDR)","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1","name":"Azure_Security_Benchmark_v3.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-2","category":"Endpoint Security","title":"Use modern
-        anti-malware software","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2","name":"Azure_Security_Benchmark_v3.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        anti-malware software","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2","name":"Azure_Security_Benchmark_v3.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-3","category":"Endpoint Security","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3","name":"Azure_Security_Benchmark_v3.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3","name":"Azure_Security_Benchmark_v3.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-1","category":"Governance and Strategy","title":"Align
-        organization roles, responsibilities, and accountabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1","name":"Azure_Security_Benchmark_v3.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        organization roles, responsibilities, and accountabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1","name":"Azure_Security_Benchmark_v3.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-10","category":"Governance and Strategy","title":"Define
-        and implement DevOps security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10","name":"Azure_Security_Benchmark_v3.0_GS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement DevOps security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10","name":"Azure_Security_Benchmark_v3.0_GS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-2","category":"Governance and Strategy","title":"Define
-        and implement enterprise segmentation/separation of duties strategy ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2","name":"Azure_Security_Benchmark_v3.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement enterprise segmentation/separation of duties strategy ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2","name":"Azure_Security_Benchmark_v3.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-3","category":"Governance and Strategy","title":"Define
-        and implement data protection strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3","name":"Azure_Security_Benchmark_v3.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement data protection strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3","name":"Azure_Security_Benchmark_v3.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-4","category":"Governance and Strategy","title":"Define
-        and implement network security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4","name":"Azure_Security_Benchmark_v3.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement network security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4","name":"Azure_Security_Benchmark_v3.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-5","category":"Governance and Strategy","title":"Define
-        and implement security posture management strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5","name":"Azure_Security_Benchmark_v3.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement security posture management strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5","name":"Azure_Security_Benchmark_v3.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-6","category":"Governance and Strategy","title":"Define
-        and implement identity and privileged access strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6","name":"Azure_Security_Benchmark_v3.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement identity and privileged access strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6","name":"Azure_Security_Benchmark_v3.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-7","category":"Governance and Strategy","title":"Define
-        and implement logging, threat detection and incident response strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7","name":"Azure_Security_Benchmark_v3.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement logging, threat detection and incident response strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7","name":"Azure_Security_Benchmark_v3.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-8","category":"Governance and Strategy","title":"Define
-        and implement backup and recovery strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8","name":"Azure_Security_Benchmark_v3.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement backup and recovery strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8","name":"Azure_Security_Benchmark_v3.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-9","category":"Governance and Strategy","title":"Define
-        and implement endpoint security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9","name":"Azure_Security_Benchmark_v3.0_GS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement endpoint security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9","name":"Azure_Security_Benchmark_v3.0_GS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-1","category":"Identity Management","title":"Use centralized
-        identity and authentication system","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1","name":"Azure_Security_Benchmark_v3.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and authentication system","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1","name":"Azure_Security_Benchmark_v3.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-2","category":"Identity Management","title":"Protect
-        identity and authentication system","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2","name":"Azure_Security_Benchmark_v3.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and authentication system","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2","name":"Azure_Security_Benchmark_v3.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-3","category":"Identity Management","title":"Manage
-        application identities securely and automatically","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3","name":"Azure_Security_Benchmark_v3.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application identities securely and automatically","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3","name":"Azure_Security_Benchmark_v3.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-4","category":"Identity Management","title":"Authenticate
-        server and services","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4","name":"Azure_Security_Benchmark_v3.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        server and services","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4","name":"Azure_Security_Benchmark_v3.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-5","category":"Identity Management","title":"Use single
-        sign-on (SSO) for application access","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5","name":"Azure_Security_Benchmark_v3.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        sign-on (SSO) for application access","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5","name":"Azure_Security_Benchmark_v3.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-6","category":"Identity Management","title":"Use strong
-        authentication controls","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6","name":"Azure_Security_Benchmark_v3.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        authentication controls","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6","name":"Azure_Security_Benchmark_v3.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-7","category":"Identity Management","title":"Restrict
-        resource access based on conditions","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7","name":"Azure_Security_Benchmark_v3.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        resource access based on conditions","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7","name":"Azure_Security_Benchmark_v3.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-8","category":"Identity Management","title":"Restrict
-        the exposure of credential and secrets","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8","name":"Azure_Security_Benchmark_v3.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        the exposure of credential and secrets","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8","name":"Azure_Security_Benchmark_v3.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-9","category":"Identity Management","title":"Secure
-        user access to existing applications","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9","name":"Azure_Security_Benchmark_v3.0_IM-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        user access to existing applications","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9","name":"Azure_Security_Benchmark_v3.0_IM-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-1","category":"Incident Response","title":"Preparation
-        - update incident response plan and handling process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1","name":"Azure_Security_Benchmark_v3.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - update incident response plan and handling process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1","name":"Azure_Security_Benchmark_v3.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-2","category":"Incident Response","title":"Preparation
-        - setup incident notification","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2","name":"Azure_Security_Benchmark_v3.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - setup incident notification","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2","name":"Azure_Security_Benchmark_v3.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-3","category":"Incident Response","title":"Detection
-        and analysis - create incidents based on high-quality alerts","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3","name":"Azure_Security_Benchmark_v3.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - create incidents based on high-quality alerts","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3","name":"Azure_Security_Benchmark_v3.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-4","category":"Incident Response","title":"Detection
-        and analysis - investigate an incident","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4","name":"Azure_Security_Benchmark_v3.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - investigate an incident","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4","name":"Azure_Security_Benchmark_v3.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-5","category":"Incident Response","title":"Detection
-        and analysis - prioritize incidents","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5","name":"Azure_Security_Benchmark_v3.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - prioritize incidents","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5","name":"Azure_Security_Benchmark_v3.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-6","category":"Incident Response","title":"Containment,
-        eradication and recovery - automate the incident handling","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6","name":"Azure_Security_Benchmark_v3.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        eradication and recovery - automate the incident handling","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6","name":"Azure_Security_Benchmark_v3.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-7","category":"Incident Response","title":"Post-incident
-        activity - conduct lesson learned and retain evidence","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7","name":"Azure_Security_Benchmark_v3.0_IR-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        activity - conduct lesson learned and retain evidence","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7","name":"Azure_Security_Benchmark_v3.0_IR-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-1","category":"Logging and Threat Detection","title":"Enable
-        threat detection capabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1","name":"Azure_Security_Benchmark_v3.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection capabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1","name":"Azure_Security_Benchmark_v3.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-2","category":"Logging and Threat Detection","title":"Enable
-        threat detection for identity and access management","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2","name":"Azure_Security_Benchmark_v3.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for identity and access management","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2","name":"Azure_Security_Benchmark_v3.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-3","category":"Logging and Threat Detection","title":"Enable
-        logging for security investigation","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3","name":"Azure_Security_Benchmark_v3.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for security investigation","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3","name":"Azure_Security_Benchmark_v3.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-4","category":"Logging and Threat Detection","title":"Enable
-        network logging for security investigation\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4","name":"Azure_Security_Benchmark_v3.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network logging for security investigation\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4","name":"Azure_Security_Benchmark_v3.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-5","category":"Logging and Threat Detection","title":"Centralize
-        security log management and analysis","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5","name":"Azure_Security_Benchmark_v3.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log management and analysis","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5","name":"Azure_Security_Benchmark_v3.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-6","category":"Logging and Threat Detection","title":"Configure
-        log storage retention","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6","name":"Azure_Security_Benchmark_v3.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log storage retention","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6","name":"Azure_Security_Benchmark_v3.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-7","category":"Logging and Threat Detection","title":"Use
-        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7","name":"Azure_Security_Benchmark_v3.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7","name":"Azure_Security_Benchmark_v3.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-1","category":"Network Security","title":"Establish
-        network segmentation boundaries ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1","name":"Azure_Security_Benchmark_v3.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network segmentation boundaries ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1","name":"Azure_Security_Benchmark_v3.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-10","category":"Network Security","title":"Ensure Domain
-        Name System (DNS) security","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10","name":"Azure_Security_Benchmark_v3.0_NS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Name System (DNS) security","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10","name":"Azure_Security_Benchmark_v3.0_NS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-2","category":"Network Security","title":"Secure cloud
-        services with network controls","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2","name":"Azure_Security_Benchmark_v3.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        services with network controls","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2","name":"Azure_Security_Benchmark_v3.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-3","category":"Network Security","title":"Deploy firewall
-        at the edge of enterprise network","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3","name":"Azure_Security_Benchmark_v3.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        at the edge of enterprise network","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3","name":"Azure_Security_Benchmark_v3.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-4","category":"Network Security","title":"Deploy intrusion
-        detection/intrusion prevention systems (IDS/IPS)","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4","name":"Azure_Security_Benchmark_v3.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        detection/intrusion prevention systems (IDS/IPS)","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4","name":"Azure_Security_Benchmark_v3.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-5","category":"Network Security","title":"Deploy DDOS
-        protection","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5","name":"Azure_Security_Benchmark_v3.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        protection","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5","name":"Azure_Security_Benchmark_v3.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-6","category":"Network Security","title":"Deploy web
-        application firewall","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6","name":"Azure_Security_Benchmark_v3.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application firewall","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6","name":"Azure_Security_Benchmark_v3.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-7","category":"Network Security","title":"Simplify network
-        security configuration","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7","name":"Azure_Security_Benchmark_v3.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"}],"nextLink":"https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata?api-version=2019-10-01&$skipToken=0w7ydLGqS_QNC3L0zClzCc8zdE93hAJbW-WgECszS-WQIGcrM0sDA2XP4DArI2VPV38rM1NTU0NltwBnK8e00ESYDuOKYhjTFgA"}'
+        security configuration","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7","name":"Azure_Security_Benchmark_v3.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"}],"nextLink":"https://management.azure.com/providers/Microsoft.PolicyInsights/policyMetadata?api-version=2019-10-01&$skipToken=0w7ydLGqS_QNC3L0zClzCc8zdE93hAJbW-WgECszS-WQIGcrM0sDA2XP4DArI2VPV38rM1NTU0NltwBnK8e00ESYDuOKYhjTFgA"}'
     headers:
       cache-control:
       - no-cache
@@ -18079,80 +18079,80 @@ interactions:
   response:
     body:
       string: '{"value":[{"properties":{"metadataId":"Azure Security Benchmark NS-8","category":"Network
-        Security","title":"Detect and disable insecure services and protocols","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8","name":"Azure_Security_Benchmark_v3.0_NS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Security","title":"Detect and disable insecure services and protocols","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8","name":"Azure_Security_Benchmark_v3.0_NS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-9","category":"Network Security","title":"Connect on-premises
-        or cloud network privately \n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9","name":"Azure_Security_Benchmark_v3.0_NS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        or cloud network privately \n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9","name":"Azure_Security_Benchmark_v3.0_NS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-1","category":"Privileged Access","title":"Separate
-        and limit highly privileged/administrative users","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1","name":"Azure_Security_Benchmark_v3.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and limit highly privileged/administrative users","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1","name":"Azure_Security_Benchmark_v3.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-2","category":"Privileged Access","title":"Avoid standing
-        access for accounts and permissions","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2","name":"Azure_Security_Benchmark_v3.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access for accounts and permissions","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2","name":"Azure_Security_Benchmark_v3.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-3","category":"Privileged Access","title":"Manage identity
-        and access lifecycle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3","name":"Azure_Security_Benchmark_v3.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and access lifecycle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3","name":"Azure_Security_Benchmark_v3.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-4","category":"Privileged Access","title":"Review and
-        reconcile user access regularly","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4","name":"Azure_Security_Benchmark_v3.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        reconcile user access regularly","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4","name":"Azure_Security_Benchmark_v3.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-5","category":"Privileged Access","title":"Set up emergency
-        access","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5","name":"Azure_Security_Benchmark_v3.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5","name":"Azure_Security_Benchmark_v3.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-6","category":"Privileged Access","title":"Use privileged
-        access workstations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6","name":"Azure_Security_Benchmark_v3.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access workstations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6","name":"Azure_Security_Benchmark_v3.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-7","category":"Privileged Access","title":"Follow just
-        enough administration (least privilege) principle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7","name":"Azure_Security_Benchmark_v3.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enough administration (least privilege) principle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7","name":"Azure_Security_Benchmark_v3.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-8","category":"Privileged Access","title":"Choose approval
-        process for third-party support\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8","name":"Azure_Security_Benchmark_v3.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        process for third-party support\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8","name":"Azure_Security_Benchmark_v3.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-1","category":"Posture and Vulnerability Management","title":"Define
-        and establish secure configurations ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1","name":"Azure_Security_Benchmark_v3.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and establish secure configurations ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1","name":"Azure_Security_Benchmark_v3.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-2","category":"Posture and Vulnerability Management","title":"Audit
-        and enforce secure configurations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2","name":"Azure_Security_Benchmark_v3.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and enforce secure configurations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2","name":"Azure_Security_Benchmark_v3.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-3","category":"Posture and Vulnerability Management","title":"Define
-        and establish secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3","name":"Azure_Security_Benchmark_v3.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and establish secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3","name":"Azure_Security_Benchmark_v3.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-4","category":"Posture and Vulnerability Management","title":"Audit
-        and enforce secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4","name":"Azure_Security_Benchmark_v3.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and enforce secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4","name":"Azure_Security_Benchmark_v3.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-5","category":"Posture and Vulnerability Management","title":"Perform
-        vulnerability assessments","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5","name":"Azure_Security_Benchmark_v3.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        vulnerability assessments","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5","name":"Azure_Security_Benchmark_v3.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-6","category":"Posture and Vulnerability Management","title":"Rapidly
-        and automatically remediate vulnerabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6","name":"Azure_Security_Benchmark_v3.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and automatically remediate vulnerabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6","name":"Azure_Security_Benchmark_v3.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-7","category":"Posture and Vulnerability Management","title":"Conduct
-        regular red team operations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7","name":"Azure_Security_Benchmark_v3.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular red team operations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7","name":"Azure_Security_Benchmark_v3.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-P1","category":"Asset Management","title":"All resources
-        deployed within your tenant are trackable via Azure Resource Graph","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_AM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_AM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        deployed within your tenant are trackable via Azure Resource Graph","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_AM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_AM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-P1","category":"Backup & Recovery","title":"Service
-        is recoverable from accidental/malicious data loss and data corruption","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        is recoverable from accidental/malicious data loss and data corruption","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-P2","category":"Backup & Recovery","title":"Services
         should automatically back up customer data managed by the service and/or allow
-        customers to configure backup for their data","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        customers to configure backup for their data","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P1","category":"Data Protection","title":"All sensitive
-        data is classified and labeled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data is classified and labeled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P2","category":"Data Protection","title":"Alerts will
-        be generated for anomalous data transfer for all services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        be generated for anomalous data transfer for all services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P3","category":"Data Protection","title":"All data is
-        encrypted in transit with strong protocols","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        encrypted in transit with strong protocols","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P4","category":"Data Protection","title":"All data is
-        encrypted at rest","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        encrypted at rest","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-P1","category":"Endpoint Security","title":"Anti-malware
-        solution is deployed & up-to-date on all endpoints","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_ES-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_ES-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        solution is deployed & up-to-date on all endpoints","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_ES-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_ES-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-P1","category":"Identity Management","title":"All service-to-service
-        & user authentication uses Azure Active Directory","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_IM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_IM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        & user authentication uses Azure Active Directory","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_IM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_IM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P1","category":"Logging & Threat Detection","title":"Azure
-        resources have threat detection enabled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        resources have threat detection enabled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P2","category":"Logging & Threat Detection","title":"Network
-        logs are collected for all Azure services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logs are collected for all Azure services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P3","category":"Logging & Threat Detection","title":"Security
-        logs are collected for all services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logs are collected for all services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P1","category":"Network Security","title":"Network firewalls
-        are enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        are enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P2","category":"Network Security","title":"Public network
-        access is disabled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access is disabled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P3","category":"Network Security","title":"DDoS protection
-        is enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        is enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P4","category":"Network Security","title":"Web Application
-        Firewall is enabled for all web workloads in a VNET or edge network locations","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Firewall is enabled for all web workloads in a VNET or edge network locations","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-P1","category":"Privileged Access","title":"No persistent
-        access exists","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access exists","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-P2","category":"Privileged Access","title":"Excessive
-        access is detected and removed","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access is detected and removed","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-P1","category":"Posture & Vulnerability Management","title":"Continuous
-        monitoring is enabled by Azure Security Center","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        monitoring is enabled by Azure Security Center","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-P2","category":"Posture & Vulnerability Management","title":"Only
-        secure images for compute resources can be used","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
+        secure images for compute resources can be used","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
         2.0 AC.L1-3.1.1","category":"Access Control","title":"Authorized Access Control","owner":"","additionalContentUrl":"https://www.acq.osd.mil/cmmc/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_AC.L1-3.1.1","name":"CMMC_2.0_AC.L1-3.1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
         2.0 AC.L1-3.1.2","category":"Access Control","title":"Transaction & Function
         Control","owner":"","additionalContentUrl":"https://www.acq.osd.mil/cmmc/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_AC.L1-3.1.2","name":"CMMC_2.0_AC.L1-3.1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
@@ -21111,183 +21111,183 @@ interactions:
         SP 800-53 Rev. 4 SI-8","category":"System and Information Integrity","title":"Spam
         Protection","owner":"Customer","additionalContentUrl":"https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control?version=4.0&number=SI-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-8","name":"NIST_SP_800-53_R4_SI-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.1","category":"Network Security","title":"Protect resources
-        using Network Security Groups or Azure Firewall on your Virtual Network","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#11-protect-resources-using-network-security-groups-or-azure-firewall-on-your-virtual-network","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.1","name":"Azure_Security_Benchmark_v1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        using Network Security Groups or Azure Firewall on your Virtual Network","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#11-protect-resources-using-network-security-groups-or-azure-firewall-on-your-virtual-network","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.1","name":"Azure_Security_Benchmark_v1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.10","category":"Network Security","title":"Document traffic
-        configuration rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#110-document-traffic-configuration-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.10","name":"Azure_Security_Benchmark_v1.0_1.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        configuration rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#110-document-traffic-configuration-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.10","name":"Azure_Security_Benchmark_v1.0_1.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.11","category":"Network Security","title":"Use automated
-        tools to monitor network resource configurations and detect changes","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#111-use-automated-tools-to-monitor-network-resource-configurations-and-detect-changes","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.11","name":"Azure_Security_Benchmark_v1.0_1.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        tools to monitor network resource configurations and detect changes","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#111-use-automated-tools-to-monitor-network-resource-configurations-and-detect-changes","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.11","name":"Azure_Security_Benchmark_v1.0_1.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.2","category":"Network Security","title":"Monitor and
-        log the configuration and traffic of Vnets, Subnets, and NICs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#12-monitor-and-log-the-configuration-and-traffic-of-vnets-subnets-and-nics","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.2","name":"Azure_Security_Benchmark_v1.0_1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log the configuration and traffic of Vnets, Subnets, and NICs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#12-monitor-and-log-the-configuration-and-traffic-of-vnets-subnets-and-nics","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.2","name":"Azure_Security_Benchmark_v1.0_1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.3","category":"Network Security","title":"Protect critical
-        web applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#13-protect-critical-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.3","name":"Azure_Security_Benchmark_v1.0_1.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        web applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#13-protect-critical-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.3","name":"Azure_Security_Benchmark_v1.0_1.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.4","category":"Network Security","title":"Deny communications
-        with known malicious IP addresses","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#14-deny-communications-with-known-malicious-ip-addresses","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.4","name":"Azure_Security_Benchmark_v1.0_1.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        with known malicious IP addresses","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#14-deny-communications-with-known-malicious-ip-addresses","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.4","name":"Azure_Security_Benchmark_v1.0_1.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.5","category":"Network Security","title":"Record network
-        packets and flow logs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#15-record-network-packets-and-flow-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.5","name":"Azure_Security_Benchmark_v1.0_1.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        packets and flow logs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#15-record-network-packets-and-flow-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.5","name":"Azure_Security_Benchmark_v1.0_1.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.6","category":"Network Security","title":"Deploy network
-        based intrusion detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#16-deploy-network-based-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.6","name":"Azure_Security_Benchmark_v1.0_1.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        based intrusion detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#16-deploy-network-based-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.6","name":"Azure_Security_Benchmark_v1.0_1.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.7","category":"Network Security","title":"Manage traffic
-        to web applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#17-manage-traffic-to-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.7","name":"Azure_Security_Benchmark_v1.0_1.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to web applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#17-manage-traffic-to-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.7","name":"Azure_Security_Benchmark_v1.0_1.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.8","category":"Network Security","title":"Minimize complexity
-        and administrative overhead of network security rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#18-minimize-complexity-and-administrative-overhead-of-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.8","name":"Azure_Security_Benchmark_v1.0_1.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and administrative overhead of network security rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#18-minimize-complexity-and-administrative-overhead-of-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.8","name":"Azure_Security_Benchmark_v1.0_1.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.9","category":"Network Security","title":"Maintain standard
-        security configurations for network devices","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#19-maintain-standard-security-configurations-for-network-devices","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.9","name":"Azure_Security_Benchmark_v1.0_1.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security configurations for network devices","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#19-maintain-standard-security-configurations-for-network-devices","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.9","name":"Azure_Security_Benchmark_v1.0_1.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.1","category":"Incident Response","title":"Create an
-        incident response guide","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#101-create-an-incident-response-guide","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.1","name":"Azure_Security_Benchmark_v1.0_10.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident response guide","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#101-create-an-incident-response-guide","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.1","name":"Azure_Security_Benchmark_v1.0_10.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.2","category":"Incident Response","title":"Create an
-        incident scoring and prioritization procedure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#102-create-an-incident-scoring-and-prioritization-procedure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.2","name":"Azure_Security_Benchmark_v1.0_10.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident scoring and prioritization procedure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#102-create-an-incident-scoring-and-prioritization-procedure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.2","name":"Azure_Security_Benchmark_v1.0_10.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.3","category":"Incident Response","title":"Test security
-        response procedures","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises#111-conduct-regular-penetration-testing-of-your-azure-resources-and-ensure-remediation-of-all-critical-security-findings-within-60-days","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.3","name":"Azure_Security_Benchmark_v1.0_10.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        response procedures","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises#111-conduct-regular-penetration-testing-of-your-azure-resources-and-ensure-remediation-of-all-critical-security-findings-within-60-days","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.3","name":"Azure_Security_Benchmark_v1.0_10.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.4","category":"Incident Response","title":"Provide security
-        incident contact details and configure alert notifications for security incidents","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#103-test-security-response-procedures","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.4","name":"Azure_Security_Benchmark_v1.0_10.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident contact details and configure alert notifications for security incidents","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#103-test-security-response-procedures","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.4","name":"Azure_Security_Benchmark_v1.0_10.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.5","category":"Incident Response","title":"Incorporate
-        security alerts into your incident response system","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#104-provide-security-incident-contact-details-and-configure-alert-notifications-for-security-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.5","name":"Azure_Security_Benchmark_v1.0_10.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security alerts into your incident response system","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#104-provide-security-incident-contact-details-and-configure-alert-notifications-for-security-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.5","name":"Azure_Security_Benchmark_v1.0_10.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.6","category":"Incident Response","title":"Automate
-        the response to security alerts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#105-incorporate-security-alerts-into-your-incident-response-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.6","name":"Azure_Security_Benchmark_v1.0_10.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        the response to security alerts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#105-incorporate-security-alerts-into-your-incident-response-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.6","name":"Azure_Security_Benchmark_v1.0_10.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 11.1","category":"Penetration Tests and Red Team Exercises","title":"Conduct
         regular penetration testing of your Azure resources and ensure remediation
-        of all critical security findings within 60 days","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#106-automate-the-response-to-security-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_11.1","name":"Azure_Security_Benchmark_v1.0_11.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of all critical security findings within 60 days","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#106-automate-the-response-to-security-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_11.1","name":"Azure_Security_Benchmark_v1.0_11.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.1","category":"Logging and Monitoring","title":"Use approved
-        time synchronization sources","owner":"Microsoft","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#21-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.1","name":"Azure_Security_Benchmark_v1.0_2.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        time synchronization sources","owner":"Microsoft","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#21-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.1","name":"Azure_Security_Benchmark_v1.0_2.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.10","category":"Logging and Monitoring","title":"Enable
-        command-line audit logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#210-enable-command-line-audit-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.10","name":"Azure_Security_Benchmark_v1.0_2.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        command-line audit logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#210-enable-command-line-audit-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.10","name":"Azure_Security_Benchmark_v1.0_2.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.2","category":"Logging and Monitoring","title":"Configure
-        central security log management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#22-configure-central-security-log-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.2","name":"Azure_Security_Benchmark_v1.0_2.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        central security log management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#22-configure-central-security-log-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.2","name":"Azure_Security_Benchmark_v1.0_2.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.3","category":"Logging and Monitoring","title":"Enable
-        audit logging for Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#23-enable-audit-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.3","name":"Azure_Security_Benchmark_v1.0_2.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        audit logging for Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#23-enable-audit-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.3","name":"Azure_Security_Benchmark_v1.0_2.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.4","category":"Logging and Monitoring","title":"Collect
-        security logs from operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#24-collect-security-logs-from-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.4","name":"Azure_Security_Benchmark_v1.0_2.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security logs from operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#24-collect-security-logs-from-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.4","name":"Azure_Security_Benchmark_v1.0_2.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.5","category":"Logging and Monitoring","title":"Configure
-        security log storage retention","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#25-configure-security-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.5","name":"Azure_Security_Benchmark_v1.0_2.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log storage retention","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#25-configure-security-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.5","name":"Azure_Security_Benchmark_v1.0_2.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.6","category":"Logging and Monitoring","title":"Monitor
-        and review Logs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#26-monitor-and-review-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.6","name":"Azure_Security_Benchmark_v1.0_2.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and review Logs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#26-monitor-and-review-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.6","name":"Azure_Security_Benchmark_v1.0_2.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.7","category":"Logging and Monitoring","title":"Enable
-        alerts for anomalous activity","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#27-enable-alerts-for-anomalous-activity","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.7","name":"Azure_Security_Benchmark_v1.0_2.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        alerts for anomalous activity","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#27-enable-alerts-for-anomalous-activity","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.7","name":"Azure_Security_Benchmark_v1.0_2.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.8","category":"Logging and Monitoring","title":"Centralize
-        anti-malware logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#28-centralize-anti-malware-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.8","name":"Azure_Security_Benchmark_v1.0_2.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        anti-malware logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#28-centralize-anti-malware-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.8","name":"Azure_Security_Benchmark_v1.0_2.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.9","category":"Logging and Monitoring","title":"Enable
-        DNS query logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#29-enable-dns-query-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.9","name":"Azure_Security_Benchmark_v1.0_2.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        DNS query logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#29-enable-dns-query-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.9","name":"Azure_Security_Benchmark_v1.0_2.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.1","category":"Identity and Access Control","title":"Maintain
-        an inventory of administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#31-maintain-an-inventory-of-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.1","name":"Azure_Security_Benchmark_v1.0_3.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        an inventory of administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#31-maintain-an-inventory-of-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.1","name":"Azure_Security_Benchmark_v1.0_3.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.10","category":"Identity and Access Control","title":"Regularly
-        review and reconcile user access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#310-regularly-review-and-reconcile-user-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.10","name":"Azure_Security_Benchmark_v1.0_3.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        review and reconcile user access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#310-regularly-review-and-reconcile-user-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.10","name":"Azure_Security_Benchmark_v1.0_3.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.11","category":"Identity and Access Control","title":"Monitor
-        attempts to access deactivated accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#311-monitor-attempts-to-access-deactivated-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.11","name":"Azure_Security_Benchmark_v1.0_3.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        attempts to access deactivated accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#311-monitor-attempts-to-access-deactivated-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.11","name":"Azure_Security_Benchmark_v1.0_3.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.12","category":"Identity and Access Control","title":"Alert
-        on account login behavior deviation","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#312-alert-on-account-login-behavior-deviation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.12","name":"Azure_Security_Benchmark_v1.0_3.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        on account login behavior deviation","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#312-alert-on-account-login-behavior-deviation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.12","name":"Azure_Security_Benchmark_v1.0_3.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.13","category":"Identity and Access Control","title":"Provide
-        Microsoft with access to relevant customer data during support scenarios","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#313-provide-microsoft-with-access-to-relevant-customer-data-during-support-scenarios","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.13","name":"Azure_Security_Benchmark_v1.0_3.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Microsoft with access to relevant customer data during support scenarios","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#313-provide-microsoft-with-access-to-relevant-customer-data-during-support-scenarios","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.13","name":"Azure_Security_Benchmark_v1.0_3.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.2","category":"Identity and Access Control","title":"Change
-        default passwords where applicable","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#32-change-default-passwords-where-applicable","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.2","name":"Azure_Security_Benchmark_v1.0_3.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        default passwords where applicable","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#32-change-default-passwords-where-applicable","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.2","name":"Azure_Security_Benchmark_v1.0_3.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.3","category":"Identity and Access Control","title":"Use
-        dedicated administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#33-use-dedicated-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.3","name":"Azure_Security_Benchmark_v1.0_3.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        dedicated administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#33-use-dedicated-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.3","name":"Azure_Security_Benchmark_v1.0_3.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.4","category":"Identity and Access Control","title":"Use
-        single sign-on (SSO) with Azure Active Directory","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#34-use-single-sign-on-sso-with-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.4","name":"Azure_Security_Benchmark_v1.0_3.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        single sign-on (SSO) with Azure Active Directory","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#34-use-single-sign-on-sso-with-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.4","name":"Azure_Security_Benchmark_v1.0_3.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.5","category":"Identity and Access Control","title":"Use
-        multi-factor authentication for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#35-use-multi-factor-authentication-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.5","name":"Azure_Security_Benchmark_v1.0_3.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        multi-factor authentication for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#35-use-multi-factor-authentication-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.5","name":"Azure_Security_Benchmark_v1.0_3.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.6","category":"Identity and Access Control","title":"Use
         dedicated machines (Privileged Access Workstations) for all administrative
-        tasks","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#36-use-dedicated-machines-privileged-access-workstations-for-all-administrative-tasks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.6","name":"Azure_Security_Benchmark_v1.0_3.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        tasks","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#36-use-dedicated-machines-privileged-access-workstations-for-all-administrative-tasks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.6","name":"Azure_Security_Benchmark_v1.0_3.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.7","category":"Identity and Access Control","title":"Log
-        and alert on suspicious activity from administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#37-log-and-alert-on-suspicious-activity-from-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.7","name":"Azure_Security_Benchmark_v1.0_3.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and alert on suspicious activity from administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#37-log-and-alert-on-suspicious-activity-from-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.7","name":"Azure_Security_Benchmark_v1.0_3.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.8","category":"Identity and Access Control","title":"Manage
-        Azure resources from only approved locations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#38-manage-azure-resources-from-only-approved-locations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.8","name":"Azure_Security_Benchmark_v1.0_3.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure resources from only approved locations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#38-manage-azure-resources-from-only-approved-locations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.8","name":"Azure_Security_Benchmark_v1.0_3.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.9","category":"Identity and Access Control","title":"Use
-        Azure Active Directory","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#39-use-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.9","name":"Azure_Security_Benchmark_v1.0_3.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Active Directory","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#39-use-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.9","name":"Azure_Security_Benchmark_v1.0_3.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.1","category":"Data Protection","title":"Maintain an
-        inventory of sensitive Information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#41-maintain-an-inventory-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.1","name":"Azure_Security_Benchmark_v1.0_4.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        inventory of sensitive Information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#41-maintain-an-inventory-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.1","name":"Azure_Security_Benchmark_v1.0_4.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.2","category":"Data Protection","title":"Isolate systems
-        storing or processing sensitive information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#42-isolate-systems-storing-or-processing-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.2","name":"Azure_Security_Benchmark_v1.0_4.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        storing or processing sensitive information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#42-isolate-systems-storing-or-processing-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.2","name":"Azure_Security_Benchmark_v1.0_4.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.3","category":"Data Protection","title":"Monitor and
-        block unauthorized transfer of sensitive information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#43-monitor-and-block-unauthorized-transfer-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.3","name":"Azure_Security_Benchmark_v1.0_4.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        block unauthorized transfer of sensitive information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#43-monitor-and-block-unauthorized-transfer-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.3","name":"Azure_Security_Benchmark_v1.0_4.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.4","category":"Data Protection","title":"Encrypt all
-        sensitive information in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#44-encrypt-all-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.4","name":"Azure_Security_Benchmark_v1.0_4.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        sensitive information in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#44-encrypt-all-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.4","name":"Azure_Security_Benchmark_v1.0_4.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.5","category":"Data Protection","title":"Use an active
-        discovery tool to identify sensitive data","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#45-use-an-active-discovery-tool-to-identify-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.5","name":"Azure_Security_Benchmark_v1.0_4.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        discovery tool to identify sensitive data","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#45-use-an-active-discovery-tool-to-identify-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.5","name":"Azure_Security_Benchmark_v1.0_4.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.6","category":"Data Protection","title":"Use Azure RBAC
-        to control access to resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#46-use-azure-rbac-to-control-access-to-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.6","name":"Azure_Security_Benchmark_v1.0_4.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to control access to resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#46-use-azure-rbac-to-control-access-to-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.6","name":"Azure_Security_Benchmark_v1.0_4.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.7","category":"Data Protection","title":"Use host-based
-        data loss prevention to enforce access control","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#47-use-host-based-data-loss-prevention-to-enforce-access-control","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.7","name":"Azure_Security_Benchmark_v1.0_4.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data loss prevention to enforce access control","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#47-use-host-based-data-loss-prevention-to-enforce-access-control","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.7","name":"Azure_Security_Benchmark_v1.0_4.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.8","category":"Data Protection","title":"Encrypt sensitive
-        information at rest","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#48-encrypt-sensitive-information-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.8","name":"Azure_Security_Benchmark_v1.0_4.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        information at rest","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#48-encrypt-sensitive-information-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.8","name":"Azure_Security_Benchmark_v1.0_4.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.9","category":"Data Protection","title":"Log and alert
-        on changes to critical Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#49-log-and-alert-on-changes-to-critical-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.9","name":"Azure_Security_Benchmark_v1.0_4.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        on changes to critical Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#49-log-and-alert-on-changes-to-critical-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.9","name":"Azure_Security_Benchmark_v1.0_4.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.1","category":"Vulnerability Management","title":"Run
-        automated vulnerability scanning tools","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.1","name":"Azure_Security_Benchmark_v1.0_5.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated vulnerability scanning tools","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.1","name":"Azure_Security_Benchmark_v1.0_5.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.2","category":"Vulnerability Management","title":"Deploy
-        automated operating system patch management solution","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#52-deploy-automated-operating-system-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.2","name":"Azure_Security_Benchmark_v1.0_5.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated operating system patch management solution","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#52-deploy-automated-operating-system-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.2","name":"Azure_Security_Benchmark_v1.0_5.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.3","category":"Vulnerability Management","title":"Deploy
-        automated third-party software patch management solution","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#53-deploy-automated-third-party-software-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.3","name":"Azure_Security_Benchmark_v1.0_5.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated third-party software patch management solution","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#53-deploy-automated-third-party-software-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.3","name":"Azure_Security_Benchmark_v1.0_5.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.4","category":"Vulnerability Management","title":"Compare
-        back-to-back vulnerability scans","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#54-compare-back-to-back-vulnerability-scans","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.4","name":"Azure_Security_Benchmark_v1.0_5.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        back-to-back vulnerability scans","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#54-compare-back-to-back-vulnerability-scans","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.4","name":"Azure_Security_Benchmark_v1.0_5.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.5","category":"Vulnerability Management","title":"Use
-        a risk-rating process to prioritize the remediation of discovered vulnerabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#55-use-a-risk-rating-process-to-prioritize-the-remediation-of-discovered-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.5","name":"Azure_Security_Benchmark_v1.0_5.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        a risk-rating process to prioritize the remediation of discovered vulnerabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#55-use-a-risk-rating-process-to-prioritize-the-remediation-of-discovered-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.5","name":"Azure_Security_Benchmark_v1.0_5.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.1","category":"Inventory and Asset Management","title":"Use
-        Azure Asset Discovery","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#61-use-azure-asset-discovery","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.1","name":"Azure_Security_Benchmark_v1.0_6.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Asset Discovery","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#61-use-azure-asset-discovery","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.1","name":"Azure_Security_Benchmark_v1.0_6.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.10","category":"Inventory and Asset Management","title":"Implement
-        approved application list","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#610-implement-approved-application-list","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.10","name":"Azure_Security_Benchmark_v1.0_6.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved application list","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#610-implement-approved-application-list","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.10","name":"Azure_Security_Benchmark_v1.0_6.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.11","category":"Inventory and Asset Management","title":"Limit
-        users'' ability to interact with AzureResources Manager via scripts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#611-limit-users-ability-to-interact-with-azure-resource-manager-via-scripts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.11","name":"Azure_Security_Benchmark_v1.0_6.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        users'' ability to interact with AzureResources Manager via scripts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#611-limit-users-ability-to-interact-with-azure-resource-manager-via-scripts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.11","name":"Azure_Security_Benchmark_v1.0_6.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.12","category":"Inventory and Asset Management","title":"Limit
-        users'' ability to execute scripts within compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#612-limit-users-ability-to-execute-scripts-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.12","name":"Azure_Security_Benchmark_v1.0_6.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        users'' ability to execute scripts within compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#612-limit-users-ability-to-execute-scripts-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.12","name":"Azure_Security_Benchmark_v1.0_6.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.13","category":"Inventory and Asset Management","title":"Physically
-        or logically segregate high risk applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#613-physically-or-logically-segregate-high-risk-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.13","name":"Azure_Security_Benchmark_v1.0_6.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        or logically segregate high risk applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#613-physically-or-logically-segregate-high-risk-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.13","name":"Azure_Security_Benchmark_v1.0_6.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.2","category":"Inventory and Asset Management","title":"Maintain
-        asset metadata","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#62-maintain-asset-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.2","name":"Azure_Security_Benchmark_v1.0_6.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        asset metadata","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#62-maintain-asset-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.2","name":"Azure_Security_Benchmark_v1.0_6.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.3","category":"Inventory and Asset Management","title":"Delete
-        unauthorized Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#63-delete-unauthorized-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.3","name":"Azure_Security_Benchmark_v1.0_6.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unauthorized Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#63-delete-unauthorized-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.3","name":"Azure_Security_Benchmark_v1.0_6.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.4","category":"Inventory and Asset Management","title":"Maintain
-        an inventory of approved Azure resources and software titles","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#64-maintain-an-inventory-of-approved-azure-resources-and-software-titles","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.4","name":"Azure_Security_Benchmark_v1.0_6.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        an inventory of approved Azure resources and software titles","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#64-maintain-an-inventory-of-approved-azure-resources-and-software-titles","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.4","name":"Azure_Security_Benchmark_v1.0_6.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.5","category":"Inventory and Asset Management","title":"Monitor
-        for unapproved Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#65-monitor-for-unapproved-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.5","name":"Azure_Security_Benchmark_v1.0_6.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        for unapproved Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#65-monitor-for-unapproved-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.5","name":"Azure_Security_Benchmark_v1.0_6.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.6","category":"Inventory and Asset Management","title":"Monitor
-        for unapproved software applications within compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#66-monitor-for-unapproved-software-applications-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.6","name":"Azure_Security_Benchmark_v1.0_6.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        for unapproved software applications within compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#66-monitor-for-unapproved-software-applications-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.6","name":"Azure_Security_Benchmark_v1.0_6.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.7","category":"Inventory and Asset Management","title":"Remove
-        unapproved Azure resources and software applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#67-remove-unapproved-azure-resources-and-software-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.7","name":"Azure_Security_Benchmark_v1.0_6.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unapproved Azure resources and software applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#67-remove-unapproved-azure-resources-and-software-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.7","name":"Azure_Security_Benchmark_v1.0_6.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.8","category":"Inventory and Asset Management","title":"Use
-        only approved applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#68-use-only-approved-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.8","name":"Azure_Security_Benchmark_v1.0_6.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        only approved applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#68-use-only-approved-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.8","name":"Azure_Security_Benchmark_v1.0_6.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.9","category":"Inventory and Asset Management","title":"Use
-        only approved Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#69-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.9","name":"Azure_Security_Benchmark_v1.0_6.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        only approved Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#69-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.9","name":"Azure_Security_Benchmark_v1.0_6.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.1","category":"Secure Configuration","title":"Establish
-        secure configurations for all Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#71-establish-secure-configurations-for-all-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.1","name":"Azure_Security_Benchmark_v1.0_7.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for all Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#71-establish-secure-configurations-for-all-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.1","name":"Azure_Security_Benchmark_v1.0_7.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.10","category":"Secure Configuration","title":"Implement
-        automated configuration monitoring for operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#710-implement-automated-configuration-monitoring-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.10","name":"Azure_Security_Benchmark_v1.0_7.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated configuration monitoring for operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#710-implement-automated-configuration-monitoring-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.10","name":"Azure_Security_Benchmark_v1.0_7.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.11","category":"Secure Configuration","title":"Manage
-        Azure secrets securely","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#711-manage-azure-secrets-securely","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.11","name":"Azure_Security_Benchmark_v1.0_7.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure secrets securely","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#711-manage-azure-secrets-securely","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.11","name":"Azure_Security_Benchmark_v1.0_7.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.12","category":"Secure Configuration","title":"Manage
-        identities securely and automatically","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#712-manage-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.12","name":"Azure_Security_Benchmark_v1.0_7.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identities securely and automatically","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#712-manage-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.12","name":"Azure_Security_Benchmark_v1.0_7.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.13","category":"Secure Configuration","title":"Eliminate
-        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#713-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.13","name":"Azure_Security_Benchmark_v1.0_7.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#713-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.13","name":"Azure_Security_Benchmark_v1.0_7.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.2","category":"Secure Configuration","title":"Establish
-        secure operating system configurations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#72-establish-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.2","name":"Azure_Security_Benchmark_v1.0_7.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure operating system configurations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#72-establish-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.2","name":"Azure_Security_Benchmark_v1.0_7.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.3","category":"Secure Configuration","title":"Maintain
-        secure Azure resource configurations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#73-maintain-secure-azure-resource-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.3","name":"Azure_Security_Benchmark_v1.0_7.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure Azure resource configurations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#73-maintain-secure-azure-resource-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.3","name":"Azure_Security_Benchmark_v1.0_7.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.4","category":"Secure Configuration","title":"Maintain
-        secure operating system configurations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#74-maintain-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.4","name":"Azure_Security_Benchmark_v1.0_7.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure operating system configurations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#74-maintain-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.4","name":"Azure_Security_Benchmark_v1.0_7.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.5","category":"Secure Configuration","title":"Securely
-        store configuration of Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#75-securely-store-configuration-of-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.5","name":"Azure_Security_Benchmark_v1.0_7.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store configuration of Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#75-securely-store-configuration-of-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.5","name":"Azure_Security_Benchmark_v1.0_7.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.6","category":"Secure Configuration","title":"Securely
-        store custom operating system images","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#76-securely-store-custom-operating-system-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.6","name":"Azure_Security_Benchmark_v1.0_7.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store custom operating system images","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#76-securely-store-custom-operating-system-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.6","name":"Azure_Security_Benchmark_v1.0_7.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.7","category":"Secure Configuration","title":"Deploy
-        system configuration management tools","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#77-deploy-system-configuration-management-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.7","name":"Azure_Security_Benchmark_v1.0_7.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system configuration management tools","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#77-deploy-system-configuration-management-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.7","name":"Azure_Security_Benchmark_v1.0_7.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.8","category":"Secure Configuration","title":"Deploy
-        system configuration management tools for operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#78-deploy-system-configuration-management-tools-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.8","name":"Azure_Security_Benchmark_v1.0_7.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system configuration management tools for operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#78-deploy-system-configuration-management-tools-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.8","name":"Azure_Security_Benchmark_v1.0_7.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.9","category":"Secure Configuration","title":"Implement
-        automated configuration monitoring for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#79-implement-automated-configuration-monitoring-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.9","name":"Azure_Security_Benchmark_v1.0_7.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated configuration monitoring for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#79-implement-automated-configuration-monitoring-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.9","name":"Azure_Security_Benchmark_v1.0_7.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.1","category":"Malware Defense","title":"Use centrally
-        managed anti-malware software","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#81-use-centrally-managed-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.1","name":"Azure_Security_Benchmark_v1.0_8.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        managed anti-malware software","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#81-use-centrally-managed-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.1","name":"Azure_Security_Benchmark_v1.0_8.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.2","category":"Malware Defense","title":"Pre-scan files
-        to be uploaded to non-compute Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#82-pre-scan-files-to-be-uploaded-to-non-compute-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.2","name":"Azure_Security_Benchmark_v1.0_8.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to be uploaded to non-compute Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#82-pre-scan-files-to-be-uploaded-to-non-compute-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.2","name":"Azure_Security_Benchmark_v1.0_8.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.3","category":"Malware Defense","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#83-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.3","name":"Azure_Security_Benchmark_v1.0_8.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#83-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.3","name":"Azure_Security_Benchmark_v1.0_8.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.1","category":"Data Recovery","title":"Ensure regular
-        automated back ups","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#91-ensure-regular-automated-back-ups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.1","name":"Azure_Security_Benchmark_v1.0_9.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated back ups","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#91-ensure-regular-automated-back-ups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.1","name":"Azure_Security_Benchmark_v1.0_9.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.2","category":"Data Recovery","title":"Perform complete
-        system backups and backup any customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#92-perform-complete-system-backups-and-backup-any-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.2","name":"Azure_Security_Benchmark_v1.0_9.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system backups and backup any customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#92-perform-complete-system-backups-and-backup-any-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.2","name":"Azure_Security_Benchmark_v1.0_9.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.3","category":"Data Recovery","title":"Validate all backups
-        including customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#93-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.3","name":"Azure_Security_Benchmark_v1.0_9.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        including customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#93-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.3","name":"Azure_Security_Benchmark_v1.0_9.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.4","category":"Data Recovery","title":"Ensure protection
-        of backups and customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#94-ensure-protection-of-backups-and-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.4","name":"Azure_Security_Benchmark_v1.0_9.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
+        of backups and customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#94-ensure-protection-of-backups-and-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.4","name":"Azure_Security_Benchmark_v1.0_9.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
         Microsoft Azure Foundations Benchmark recommendation 1.1","category":"Identity
         and Access Management","title":"Ensure that multi-factor authentication is
         enabled for all privileged users","owner":"Customer","additionalContentUrl":"https://www.cisecurity.org/benchmark/azure/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.1.0_1.1","name":"CIS_Azure_1.1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
@@ -24023,145 +24023,145 @@ interactions:
         organization has implemented technical means to ensure covered information
         is stored in organization-specified locations.","owner":"Customer","additionalContentUrl":"","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/hipaa-19245.06d2Organizational.2-06.d","name":"hipaa-19245.06d2Organizational.2-06.d","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-1","category":"Asset Management","title":"Ensure security
-        team has visibility into risks for assets","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-1-ensure-security-team-has-visibility-into-risks-for-assets","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-1","name":"Azure_Security_Benchmark_v2.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        team has visibility into risks for assets","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-1-ensure-security-team-has-visibility-into-risks-for-assets","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-1","name":"Azure_Security_Benchmark_v2.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-2","category":"Asset Management","title":"Ensure security
-        team has access to asset inventory and metadata","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-2-ensure-security-team-has-access-to-asset-inventory-and-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-2","name":"Azure_Security_Benchmark_v2.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        team has access to asset inventory and metadata","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-2-ensure-security-team-has-access-to-asset-inventory-and-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-2","name":"Azure_Security_Benchmark_v2.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-3","category":"Asset Management","title":"Use only approved
-        Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-3-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-3","name":"Azure_Security_Benchmark_v2.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-3-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-3","name":"Azure_Security_Benchmark_v2.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-4","category":"Asset Management","title":"Ensure security
-        of asset lifecycle management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-4-ensure-security-of-asset-lifecycle-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-4","name":"Azure_Security_Benchmark_v2.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of asset lifecycle management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-4-ensure-security-of-asset-lifecycle-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-4","name":"Azure_Security_Benchmark_v2.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-5","category":"Asset Management","title":"Limit users''
-        ability to interact with Azure Resource Manager","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-5-limit-users-ability-to-interact-with-azure-resource-manager","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-5","name":"Azure_Security_Benchmark_v2.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        ability to interact with Azure Resource Manager","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-5-limit-users-ability-to-interact-with-azure-resource-manager","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-5","name":"Azure_Security_Benchmark_v2.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-6","category":"Asset Management","title":"Use only approved
-        applications in compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-6-use-only-approved-applications-in-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-6","name":"Azure_Security_Benchmark_v2.0_AM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        applications in compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-6-use-only-approved-applications-in-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-6","name":"Azure_Security_Benchmark_v2.0_AM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-1","category":"Backup and Recovery","title":"Ensure
-        regular automated backups","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-1-ensure-regular-automated-backups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-1","name":"Azure_Security_Benchmark_v2.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular automated backups","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-1-ensure-regular-automated-backups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-1","name":"Azure_Security_Benchmark_v2.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-2","category":"Backup and Recovery","title":"Encrypt
-        backup data","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-2-encrypt-backup-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-2","name":"Azure_Security_Benchmark_v2.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup data","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-2-encrypt-backup-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-2","name":"Azure_Security_Benchmark_v2.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-3","category":"Backup and Recovery","title":"Validate
-        all backups including customer-managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-3-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-3","name":"Azure_Security_Benchmark_v2.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        all backups including customer-managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-3-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-3","name":"Azure_Security_Benchmark_v2.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-4","category":"Backup and Recovery","title":"Mitigate
-        risk of lost keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-4-mitigate-risk-of-lost-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-4","name":"Azure_Security_Benchmark_v2.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        risk of lost keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-4-mitigate-risk-of-lost-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-4","name":"Azure_Security_Benchmark_v2.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-1","category":"Data Protection","title":"Discovery,
-        classify and label sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-1-discovery-classify-and-label-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-1","name":"Azure_Security_Benchmark_v2.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        classify and label sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-1-discovery-classify-and-label-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-1","name":"Azure_Security_Benchmark_v2.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-2","category":"Data Protection","title":"Protect sensitive
-        data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-2-protect-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-2","name":"Azure_Security_Benchmark_v2.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-2-protect-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-2","name":"Azure_Security_Benchmark_v2.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-3","category":"Data Protection","title":"Monitor for
-        unauthorized transfer of sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-3-monitor-for-unauthorized-transfer-of-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-3","name":"Azure_Security_Benchmark_v2.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unauthorized transfer of sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-3-monitor-for-unauthorized-transfer-of-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-3","name":"Azure_Security_Benchmark_v2.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-4","category":"Data Protection","title":"Encrypt sensitive
-        information in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-4-encrypt-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-4","name":"Azure_Security_Benchmark_v2.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        information in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-4-encrypt-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-4","name":"Azure_Security_Benchmark_v2.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-5","category":"Data Protection","title":"Encrypt sensitive
-        data at rest","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-5-encrypt-sensitive-data-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-5","name":"Azure_Security_Benchmark_v2.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data at rest","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-5-encrypt-sensitive-data-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-5","name":"Azure_Security_Benchmark_v2.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-1","category":"Endpoint Security","title":"Use Endpoint
-        Detection and Response (EDR)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-1-use-endpoint-detection-and-response-edr","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-1","name":"Azure_Security_Benchmark_v2.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Detection and Response (EDR)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-1-use-endpoint-detection-and-response-edr","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-1","name":"Azure_Security_Benchmark_v2.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-2","category":"Endpoint Security","title":"Use centrally
-        managed modern anti-malware software","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-2-use-centrally-managed-modern-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-2","name":"Azure_Security_Benchmark_v2.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        managed modern anti-malware software","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-2-use-centrally-managed-modern-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-2","name":"Azure_Security_Benchmark_v2.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-3","category":"Endpoint Security","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-3-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-3","name":"Azure_Security_Benchmark_v2.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-3-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-3","name":"Azure_Security_Benchmark_v2.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-1","category":"Governance and Strategy","title":"Define
-        asset management and data protection strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-1-define-asset-management-and-data-protection-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-1","name":"Azure_Security_Benchmark_v2.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        asset management and data protection strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-1-define-asset-management-and-data-protection-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-1","name":"Azure_Security_Benchmark_v2.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-2","category":"Governance and Strategy","title":"Define
-        enterprise segmentation strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-2-define-enterprise-segmentation-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-2","name":"Azure_Security_Benchmark_v2.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enterprise segmentation strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-2-define-enterprise-segmentation-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-2","name":"Azure_Security_Benchmark_v2.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-3","category":"Governance and Strategy","title":"Define
-        security posture management strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-3-define-security-posture-management-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-3","name":"Azure_Security_Benchmark_v2.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security posture management strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-3-define-security-posture-management-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-3","name":"Azure_Security_Benchmark_v2.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-4","category":"Governance and Strategy","title":"Align
-        organization roles, responsibilities, and accountabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-4-align-organization-roles-responsibilities-and-accountabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-4","name":"Azure_Security_Benchmark_v2.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        organization roles, responsibilities, and accountabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-4-align-organization-roles-responsibilities-and-accountabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-4","name":"Azure_Security_Benchmark_v2.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-5","category":"Governance and Strategy","title":"Define
-        network security strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-5-define-network-security-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-5","name":"Azure_Security_Benchmark_v2.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network security strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-5-define-network-security-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-5","name":"Azure_Security_Benchmark_v2.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-6","category":"Governance and Strategy","title":"Define
-        identity and privileged access strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-6-define-identity-and-privileged-access-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-6","name":"Azure_Security_Benchmark_v2.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and privileged access strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-6-define-identity-and-privileged-access-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-6","name":"Azure_Security_Benchmark_v2.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-7","category":"Governance and Strategy","title":"Define
-        logging and threat response strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-7-define-logging-and-threat-response-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-7","name":"Azure_Security_Benchmark_v2.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging and threat response strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-7-define-logging-and-threat-response-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-7","name":"Azure_Security_Benchmark_v2.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-8","category":"Governance and Strategy","title":"Define
-        backup and recovery strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-8-define-backup-and-recovery-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-8","name":"Azure_Security_Benchmark_v2.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup and recovery strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-8-define-backup-and-recovery-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-8","name":"Azure_Security_Benchmark_v2.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-1","category":"Identity Management","title":"Standardize
-        Azure Active Directory as the central identity and authentication system","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-1-standardize-azure-active-directory-as-the-central-identity-and-authentication-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-1","name":"Azure_Security_Benchmark_v2.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Active Directory as the central identity and authentication system","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-1-standardize-azure-active-directory-as-the-central-identity-and-authentication-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-1","name":"Azure_Security_Benchmark_v2.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-2","category":"Identity Management","title":"Manage
-        application identities securely and automatically","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-2-manage-application-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-2","name":"Azure_Security_Benchmark_v2.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application identities securely and automatically","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-2-manage-application-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-2","name":"Azure_Security_Benchmark_v2.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-3","category":"Identity Management","title":"Use Azure
-        AD single sign-on (SSO) for application access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-3-use-azure-ad-single-sign-on-sso-for-application-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-3","name":"Azure_Security_Benchmark_v2.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        AD single sign-on (SSO) for application access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-3-use-azure-ad-single-sign-on-sso-for-application-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-3","name":"Azure_Security_Benchmark_v2.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-4","category":"Identity Management","title":"Use strong
-        authentication controls for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-4","name":"Azure_Security_Benchmark_v2.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        authentication controls for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-4","name":"Azure_Security_Benchmark_v2.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-5","category":"Identity Management","title":"Monitor
-        and alert on account anomalies","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-5-monitor-and-alert-on-account-anomalies","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-5","name":"Azure_Security_Benchmark_v2.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and alert on account anomalies","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-5-monitor-and-alert-on-account-anomalies","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-5","name":"Azure_Security_Benchmark_v2.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-6","category":"Identity Management","title":"Restrict
-        Azure resource access based on conditions","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-6-restrict-azure-resource-access-based-on-conditions","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-6","name":"Azure_Security_Benchmark_v2.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure resource access based on conditions","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-6-restrict-azure-resource-access-based-on-conditions","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-6","name":"Azure_Security_Benchmark_v2.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-7","category":"Identity Management","title":"Eliminate
-        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-7-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-7","name":"Azure_Security_Benchmark_v2.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-7-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-7","name":"Azure_Security_Benchmark_v2.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-8","category":"Identity Management","title":"Secure
-        user access to legacy applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-8-secure-user-access-to-legacy-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-8","name":"Azure_Security_Benchmark_v2.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        user access to legacy applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-8-secure-user-access-to-legacy-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-8","name":"Azure_Security_Benchmark_v2.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-1","category":"Incident Response","title":"Preparation
-        - update incident response process for Azure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-1-preparation--update-incident-response-process-for-azure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-1","name":"Azure_Security_Benchmark_v2.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - update incident response process for Azure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-1-preparation--update-incident-response-process-for-azure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-1","name":"Azure_Security_Benchmark_v2.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-2","category":"Incident Response","title":"Preparation
-        - setup incident notification","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-2-preparation--setup-incident-notification","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-2","name":"Azure_Security_Benchmark_v2.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - setup incident notification","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-2-preparation--setup-incident-notification","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-2","name":"Azure_Security_Benchmark_v2.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-3","category":"Incident Response","title":"Detection
-        and analysis - create incidents based on high quality alerts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-3-detection-and-analysis--create-incidents-based-on-high-quality-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-3","name":"Azure_Security_Benchmark_v2.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - create incidents based on high quality alerts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-3-detection-and-analysis--create-incidents-based-on-high-quality-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-3","name":"Azure_Security_Benchmark_v2.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-4","category":"Incident Response","title":"Detection
-        and analysis - investigate an incident","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-4-detection-and-analysis--investigate-an-incident","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-4","name":"Azure_Security_Benchmark_v2.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - investigate an incident","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-4-detection-and-analysis--investigate-an-incident","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-4","name":"Azure_Security_Benchmark_v2.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-5","category":"Incident Response","title":"Detection
-        and analysis - prioritize incidents","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-5-detection-and-analysis--prioritize-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-5","name":"Azure_Security_Benchmark_v2.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - prioritize incidents","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-5-detection-and-analysis--prioritize-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-5","name":"Azure_Security_Benchmark_v2.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-6","category":"Incident Response","title":"Containment,
-        eradication and recovery - automate the incident handling","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-6-containment-eradication-and-recovery--automate-the-incident-handling","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-6","name":"Azure_Security_Benchmark_v2.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        eradication and recovery - automate the incident handling","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-6-containment-eradication-and-recovery--automate-the-incident-handling","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-6","name":"Azure_Security_Benchmark_v2.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-1","category":"Logging and Threat Detection","title":"Enable
-        threat detection for Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-1-enable-threat-detection-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-1","name":"Azure_Security_Benchmark_v2.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-1-enable-threat-detection-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-1","name":"Azure_Security_Benchmark_v2.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-2","category":"Logging and Threat Detection","title":"Enable
-        threat detection for Azure identity and access management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-2-enable-threat-detection-for-azure-identity-and-access-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-2","name":"Azure_Security_Benchmark_v2.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for Azure identity and access management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-2-enable-threat-detection-for-azure-identity-and-access-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-2","name":"Azure_Security_Benchmark_v2.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-3","category":"Logging and Threat Detection","title":"Enable
-        logging for Azure network activities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-3-enable-logging-for-azure-network-activities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-3","name":"Azure_Security_Benchmark_v2.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for Azure network activities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-3-enable-logging-for-azure-network-activities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-3","name":"Azure_Security_Benchmark_v2.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-4","category":"Logging and Threat Detection","title":"Enable
-        logging for Azure resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-4","name":"Azure_Security_Benchmark_v2.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for Azure resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-4","name":"Azure_Security_Benchmark_v2.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-5","category":"Logging and Threat Detection","title":"Centralize
-        security log management and analysis","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-5-centralize-security-log-management-and-analysis","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-5","name":"Azure_Security_Benchmark_v2.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log management and analysis","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-5-centralize-security-log-management-and-analysis","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-5","name":"Azure_Security_Benchmark_v2.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-6","category":"Logging and Threat Detection","title":"Configure
-        log storage retention","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-6-configure-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-6","name":"Azure_Security_Benchmark_v2.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log storage retention","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-6-configure-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-6","name":"Azure_Security_Benchmark_v2.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-7","category":"Logging and Threat Detection","title":"Use
-        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-7-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-7","name":"Azure_Security_Benchmark_v2.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-7-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-7","name":"Azure_Security_Benchmark_v2.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-1","category":"Network Security","title":"Implement
-        security for internal traffic","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-1-implement-security-for-internal-traffic","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-1","name":"Azure_Security_Benchmark_v2.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security for internal traffic","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-1-implement-security-for-internal-traffic","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-1","name":"Azure_Security_Benchmark_v2.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-2","category":"Network Security","title":"Connect private
-        networks together","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-2-connect-private-networks-together","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-2","name":"Azure_Security_Benchmark_v2.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        networks together","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-2-connect-private-networks-together","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-2","name":"Azure_Security_Benchmark_v2.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-3","category":"Network Security","title":"Establish
-        private network access to Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-3-establish-private-network-access-to-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-3","name":"Azure_Security_Benchmark_v2.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        private network access to Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-3-establish-private-network-access-to-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-3","name":"Azure_Security_Benchmark_v2.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-4","category":"Network Security","title":"Protect applications
-        and services from external network attacks","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-4-protect-applications-and-services-from-external-network-attacks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-4","name":"Azure_Security_Benchmark_v2.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and services from external network attacks","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-4-protect-applications-and-services-from-external-network-attacks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-4","name":"Azure_Security_Benchmark_v2.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-5","category":"Network Security","title":"Deploy intrusion
-        detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-5-deploy-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-5","name":"Azure_Security_Benchmark_v2.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-5-deploy-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-5","name":"Azure_Security_Benchmark_v2.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-6","category":"Network Security","title":"Simplify network
-        security rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-6-simplify-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-6","name":"Azure_Security_Benchmark_v2.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-6-simplify-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-6","name":"Azure_Security_Benchmark_v2.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-7","category":"Network Security","title":"Secure Domain
-        Name Service (DNS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-7-secure-domain-name-service-dns","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-7","name":"Azure_Security_Benchmark_v2.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Name Service (DNS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-7-secure-domain-name-service-dns","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-7","name":"Azure_Security_Benchmark_v2.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-1","category":"Privileged Access","title":"Protect and
-        limit highly privileged users","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-1-protect-and-limit-highly-privileged-users","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-1","name":"Azure_Security_Benchmark_v2.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        limit highly privileged users","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-1-protect-and-limit-highly-privileged-users","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-1","name":"Azure_Security_Benchmark_v2.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-2","category":"Privileged Access","title":"Restrict
-        administrative access to business-critical systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-2-restrict-administrative-access-to-business-critical-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-2","name":"Azure_Security_Benchmark_v2.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        administrative access to business-critical systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-2-restrict-administrative-access-to-business-critical-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-2","name":"Azure_Security_Benchmark_v2.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-3","category":"Privileged Access","title":"Review and
-        reconcile user access regularly","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-3-review-and-reconcile-user-access-regularly","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-3","name":"Azure_Security_Benchmark_v2.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        reconcile user access regularly","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-3-review-and-reconcile-user-access-regularly","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-3","name":"Azure_Security_Benchmark_v2.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-4","category":"Privileged Access","title":"Set up emergency
-        access in Azure AD","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-4-set-up-emergency-access-in-azure-ad","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-4","name":"Azure_Security_Benchmark_v2.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access in Azure AD","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-4-set-up-emergency-access-in-azure-ad","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-4","name":"Azure_Security_Benchmark_v2.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-5","category":"Privileged Access","title":"Automate
-        entitlement management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-5-automate-entitlement-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-5","name":"Azure_Security_Benchmark_v2.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        entitlement management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-5-automate-entitlement-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-5","name":"Azure_Security_Benchmark_v2.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-6","category":"Privileged Access","title":"Use privileged
-        access workstations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-6-use-privileged-access-workstations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-6","name":"Azure_Security_Benchmark_v2.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access workstations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-6-use-privileged-access-workstations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-6","name":"Azure_Security_Benchmark_v2.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-7","category":"Privileged Access","title":"Follow just
-        enough administration (least privilege principle)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-7","name":"Azure_Security_Benchmark_v2.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enough administration (least privilege principle)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-7","name":"Azure_Security_Benchmark_v2.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-8","category":"Privileged Access","title":"Choose approval
-        process for Microsoft support","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-8-choose-approval-process-for-microsoft-support","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-8","name":"Azure_Security_Benchmark_v2.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        process for Microsoft support","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-8-choose-approval-process-for-microsoft-support","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-8","name":"Azure_Security_Benchmark_v2.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-1","category":"Posture and Vulnerability Management","title":"Establish
-        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-1-establish-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-1","name":"Azure_Security_Benchmark_v2.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-1-establish-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-1","name":"Azure_Security_Benchmark_v2.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-2","category":"Posture and Vulnerability Management","title":"Sustain
-        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-2-sustain-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-2","name":"Azure_Security_Benchmark_v2.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-2-sustain-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-2","name":"Azure_Security_Benchmark_v2.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-3","category":"Posture and Vulnerability Management","title":"Establish
-        secure configurations for compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-3-establish-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-3","name":"Azure_Security_Benchmark_v2.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-3-establish-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-3","name":"Azure_Security_Benchmark_v2.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-4","category":"Posture and Vulnerability Management","title":"Sustain
-        secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-4-sustain-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-4","name":"Azure_Security_Benchmark_v2.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-4-sustain-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-4","name":"Azure_Security_Benchmark_v2.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-5","category":"Posture and Vulnerability Management","title":"Securely
-        store custom operating system and container images","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-5-securely-store-custom-operating-system-and-container-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-5","name":"Azure_Security_Benchmark_v2.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store custom operating system and container images","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-5-securely-store-custom-operating-system-and-container-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-5","name":"Azure_Security_Benchmark_v2.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-6","category":"Posture and Vulnerability Management","title":"Perform
-        software vulnerability assessments","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-6-perform-software-vulnerability-assessments","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-6","name":"Azure_Security_Benchmark_v2.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software vulnerability assessments","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-6-perform-software-vulnerability-assessments","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-6","name":"Azure_Security_Benchmark_v2.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-7","category":"Posture and Vulnerability Management","title":"Rapidly
-        and automatically remediate software vulnerabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-7-rapidly-and-automatically-remediate-software-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-7","name":"Azure_Security_Benchmark_v2.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and automatically remediate software vulnerabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-7-rapidly-and-automatically-remediate-software-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-7","name":"Azure_Security_Benchmark_v2.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-8","category":"Posture and Vulnerability Management","title":"Conduct
-        regular attack simulation","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-8-conduct-regular-attack-simulation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-8","name":"Azure_Security_Benchmark_v2.0_PV-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
+        regular attack simulation","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-8-conduct-regular-attack-simulation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-8","name":"Azure_Security_Benchmark_v2.0_PV-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
         Microsoft Azure Foundations Benchmark recommendation 1.1","category":"Identity
         and Access Management","title":"Ensure that multi-factor authentication is
         enabled for all privileged users","owner":"Customer","additionalContentUrl":"https://www.cisecurity.org/benchmark/azure/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.2.0_1.1","name":"CIS_Azure_1.2.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
@@ -33468,216 +33468,216 @@ interactions:
         Appendix 5.8","category":"Control Measures on Cybersecurity","title":"Control
         Measures on Cybersecurity - Appendix 5.8","owner":"Customer","additionalContentUrl":"https://www.bnm.gov.my/banking-islamic-banking","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/RMiT_v1.0_Appendix_5.8","name":"RMiT_v1.0_Appendix_5.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-1","category":"Asset Management","title":"Track asset
-        inventory and their risks","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1","name":"Azure_Security_Benchmark_v3.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        inventory and their risks","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1","name":"Azure_Security_Benchmark_v3.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-2","category":"Asset Management","title":"Use only approved
-        services\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2","name":"Azure_Security_Benchmark_v3.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        services\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2","name":"Azure_Security_Benchmark_v3.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-3","category":"Asset Management","title":"Ensure security
-        of asset lifecycle management\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3","name":"Azure_Security_Benchmark_v3.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of asset lifecycle management\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3","name":"Azure_Security_Benchmark_v3.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-4","category":"Asset Management","title":"Limit access
-        to asset management\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4","name":"Azure_Security_Benchmark_v3.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to asset management\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4","name":"Azure_Security_Benchmark_v3.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-5","category":"Asset Management","title":"Use only approved
-        applications in virtual machine","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5","name":"Azure_Security_Benchmark_v3.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        applications in virtual machine","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5","name":"Azure_Security_Benchmark_v3.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-1","category":"Backup and Recovery","title":"Ensure
-        regular automated backups","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1","name":"Azure_Security_Benchmark_v3.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular automated backups","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1","name":"Azure_Security_Benchmark_v3.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-2","category":"Backup and Recovery","title":"Protect
-        backup and recovery data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2","name":"Azure_Security_Benchmark_v3.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup and recovery data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2","name":"Azure_Security_Benchmark_v3.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-3","category":"Backup and Recovery","title":"Monitor
-        backups","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3","name":"Azure_Security_Benchmark_v3.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backups","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3","name":"Azure_Security_Benchmark_v3.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-4","category":"Backup and Recovery","title":"Regularly
-        test backup","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4","name":"Azure_Security_Benchmark_v3.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        test backup","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4","name":"Azure_Security_Benchmark_v3.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-1","category":"Data Protection","title":"Discover, classify,
-        and label sensitive data\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1","name":"Azure_Security_Benchmark_v3.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and label sensitive data\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1","name":"Azure_Security_Benchmark_v3.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-2","category":"Data Protection","title":"Monitor anomalies
-        and threats targeting sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2","name":"Azure_Security_Benchmark_v3.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and threats targeting sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2","name":"Azure_Security_Benchmark_v3.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-3","category":"Data Protection","title":"Encrypt sensitive
-        data in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3","name":"Azure_Security_Benchmark_v3.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3","name":"Azure_Security_Benchmark_v3.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-4","category":"Data Protection","title":"Enable data
-        at rest encryption by default","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4","name":"Azure_Security_Benchmark_v3.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        at rest encryption by default","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4","name":"Azure_Security_Benchmark_v3.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-5","category":"Data Protection","title":"Use customer-managed
-        key option in data at rest encryption when required","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5","name":"Azure_Security_Benchmark_v3.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        key option in data at rest encryption when required","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5","name":"Azure_Security_Benchmark_v3.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-6","category":"Data Protection","title":"Use a secure
-        key management process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6","name":"Azure_Security_Benchmark_v3.0_DP-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        key management process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6","name":"Azure_Security_Benchmark_v3.0_DP-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-7","category":"Data Protection","title":"Use a secure
-        certificate management process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7","name":"Azure_Security_Benchmark_v3.0_DP-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        certificate management process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7","name":"Azure_Security_Benchmark_v3.0_DP-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-8","category":"Data Protection","title":"Ensure security
-        of key and certificate repository ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8","name":"Azure_Security_Benchmark_v3.0_DP-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of key and certificate repository ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8","name":"Azure_Security_Benchmark_v3.0_DP-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-1","category":"DevOps Security","title":"Conduct threat
-        modeling\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1","name":"Azure_Security_Benchmark_v3.0_DS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        modeling\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1","name":"Azure_Security_Benchmark_v3.0_DS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-2","category":"DevOps Security","title":"Ensure software
-        supply chain security","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2","name":"Azure_Security_Benchmark_v3.0_DS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        supply chain security","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2","name":"Azure_Security_Benchmark_v3.0_DS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-3","category":"DevOps Security","title":"Secure DevOps
-        infrastructure","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3","name":"Azure_Security_Benchmark_v3.0_DS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        infrastructure","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3","name":"Azure_Security_Benchmark_v3.0_DS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-4","category":"DevOps Security","title":"Integrate static
-        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4","name":"Azure_Security_Benchmark_v3.0_DS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4","name":"Azure_Security_Benchmark_v3.0_DS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-5","category":"DevOps Security","title":"Integrate dynamic
-        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5","name":"Azure_Security_Benchmark_v3.0_DS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5","name":"Azure_Security_Benchmark_v3.0_DS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-6","category":"DevOps Security","title":"Enforce security
-        of workload throughout DevOps lifecycle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6","name":"Azure_Security_Benchmark_v3.0_DS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of workload throughout DevOps lifecycle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6","name":"Azure_Security_Benchmark_v3.0_DS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-7","category":"DevOps Security","title":"Enable logging
-        and monitoring in DevOps","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7","name":"Azure_Security_Benchmark_v3.0_DS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and monitoring in DevOps","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7","name":"Azure_Security_Benchmark_v3.0_DS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-1","category":"Endpoint Security","title":"Use Endpoint
-        Detection and Response (EDR)","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1","name":"Azure_Security_Benchmark_v3.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Detection and Response (EDR)","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1","name":"Azure_Security_Benchmark_v3.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-2","category":"Endpoint Security","title":"Use modern
-        anti-malware software","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2","name":"Azure_Security_Benchmark_v3.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        anti-malware software","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2","name":"Azure_Security_Benchmark_v3.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-3","category":"Endpoint Security","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3","name":"Azure_Security_Benchmark_v3.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3","name":"Azure_Security_Benchmark_v3.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-1","category":"Governance and Strategy","title":"Align
-        organization roles, responsibilities, and accountabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1","name":"Azure_Security_Benchmark_v3.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        organization roles, responsibilities, and accountabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1","name":"Azure_Security_Benchmark_v3.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-10","category":"Governance and Strategy","title":"Define
-        and implement DevOps security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10","name":"Azure_Security_Benchmark_v3.0_GS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement DevOps security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10","name":"Azure_Security_Benchmark_v3.0_GS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-2","category":"Governance and Strategy","title":"Define
-        and implement enterprise segmentation/separation of duties strategy ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2","name":"Azure_Security_Benchmark_v3.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement enterprise segmentation/separation of duties strategy ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2","name":"Azure_Security_Benchmark_v3.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-3","category":"Governance and Strategy","title":"Define
-        and implement data protection strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3","name":"Azure_Security_Benchmark_v3.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement data protection strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3","name":"Azure_Security_Benchmark_v3.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-4","category":"Governance and Strategy","title":"Define
-        and implement network security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4","name":"Azure_Security_Benchmark_v3.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement network security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4","name":"Azure_Security_Benchmark_v3.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-5","category":"Governance and Strategy","title":"Define
-        and implement security posture management strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5","name":"Azure_Security_Benchmark_v3.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement security posture management strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5","name":"Azure_Security_Benchmark_v3.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-6","category":"Governance and Strategy","title":"Define
-        and implement identity and privileged access strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6","name":"Azure_Security_Benchmark_v3.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement identity and privileged access strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6","name":"Azure_Security_Benchmark_v3.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-7","category":"Governance and Strategy","title":"Define
-        and implement logging, threat detection and incident response strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7","name":"Azure_Security_Benchmark_v3.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement logging, threat detection and incident response strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7","name":"Azure_Security_Benchmark_v3.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-8","category":"Governance and Strategy","title":"Define
-        and implement backup and recovery strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8","name":"Azure_Security_Benchmark_v3.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement backup and recovery strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8","name":"Azure_Security_Benchmark_v3.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-9","category":"Governance and Strategy","title":"Define
-        and implement endpoint security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9","name":"Azure_Security_Benchmark_v3.0_GS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement endpoint security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9","name":"Azure_Security_Benchmark_v3.0_GS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-1","category":"Identity Management","title":"Use centralized
-        identity and authentication system","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1","name":"Azure_Security_Benchmark_v3.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and authentication system","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1","name":"Azure_Security_Benchmark_v3.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-2","category":"Identity Management","title":"Protect
-        identity and authentication system","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2","name":"Azure_Security_Benchmark_v3.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and authentication system","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2","name":"Azure_Security_Benchmark_v3.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-3","category":"Identity Management","title":"Manage
-        application identities securely and automatically","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3","name":"Azure_Security_Benchmark_v3.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application identities securely and automatically","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3","name":"Azure_Security_Benchmark_v3.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-4","category":"Identity Management","title":"Authenticate
-        server and services","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4","name":"Azure_Security_Benchmark_v3.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        server and services","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4","name":"Azure_Security_Benchmark_v3.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-5","category":"Identity Management","title":"Use single
-        sign-on (SSO) for application access","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5","name":"Azure_Security_Benchmark_v3.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        sign-on (SSO) for application access","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5","name":"Azure_Security_Benchmark_v3.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-6","category":"Identity Management","title":"Use strong
-        authentication controls","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6","name":"Azure_Security_Benchmark_v3.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        authentication controls","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6","name":"Azure_Security_Benchmark_v3.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-7","category":"Identity Management","title":"Restrict
-        resource access based on conditions","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7","name":"Azure_Security_Benchmark_v3.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        resource access based on conditions","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7","name":"Azure_Security_Benchmark_v3.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-8","category":"Identity Management","title":"Restrict
-        the exposure of credential and secrets","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8","name":"Azure_Security_Benchmark_v3.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        the exposure of credential and secrets","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8","name":"Azure_Security_Benchmark_v3.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-9","category":"Identity Management","title":"Secure
-        user access to existing applications","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9","name":"Azure_Security_Benchmark_v3.0_IM-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        user access to existing applications","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9","name":"Azure_Security_Benchmark_v3.0_IM-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-1","category":"Incident Response","title":"Preparation
-        - update incident response plan and handling process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1","name":"Azure_Security_Benchmark_v3.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - update incident response plan and handling process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1","name":"Azure_Security_Benchmark_v3.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-2","category":"Incident Response","title":"Preparation
-        - setup incident notification","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2","name":"Azure_Security_Benchmark_v3.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - setup incident notification","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2","name":"Azure_Security_Benchmark_v3.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-3","category":"Incident Response","title":"Detection
-        and analysis - create incidents based on high-quality alerts","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3","name":"Azure_Security_Benchmark_v3.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - create incidents based on high-quality alerts","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3","name":"Azure_Security_Benchmark_v3.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-4","category":"Incident Response","title":"Detection
-        and analysis - investigate an incident","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4","name":"Azure_Security_Benchmark_v3.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - investigate an incident","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4","name":"Azure_Security_Benchmark_v3.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-5","category":"Incident Response","title":"Detection
-        and analysis - prioritize incidents","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5","name":"Azure_Security_Benchmark_v3.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - prioritize incidents","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5","name":"Azure_Security_Benchmark_v3.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-6","category":"Incident Response","title":"Containment,
-        eradication and recovery - automate the incident handling","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6","name":"Azure_Security_Benchmark_v3.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        eradication and recovery - automate the incident handling","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6","name":"Azure_Security_Benchmark_v3.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-7","category":"Incident Response","title":"Post-incident
-        activity - conduct lesson learned and retain evidence","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7","name":"Azure_Security_Benchmark_v3.0_IR-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        activity - conduct lesson learned and retain evidence","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7","name":"Azure_Security_Benchmark_v3.0_IR-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-1","category":"Logging and Threat Detection","title":"Enable
-        threat detection capabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1","name":"Azure_Security_Benchmark_v3.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection capabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1","name":"Azure_Security_Benchmark_v3.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-2","category":"Logging and Threat Detection","title":"Enable
-        threat detection for identity and access management","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2","name":"Azure_Security_Benchmark_v3.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for identity and access management","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2","name":"Azure_Security_Benchmark_v3.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-3","category":"Logging and Threat Detection","title":"Enable
-        logging for security investigation","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3","name":"Azure_Security_Benchmark_v3.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for security investigation","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3","name":"Azure_Security_Benchmark_v3.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-4","category":"Logging and Threat Detection","title":"Enable
-        network logging for security investigation\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4","name":"Azure_Security_Benchmark_v3.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network logging for security investigation\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4","name":"Azure_Security_Benchmark_v3.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-5","category":"Logging and Threat Detection","title":"Centralize
-        security log management and analysis","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5","name":"Azure_Security_Benchmark_v3.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log management and analysis","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5","name":"Azure_Security_Benchmark_v3.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-6","category":"Logging and Threat Detection","title":"Configure
-        log storage retention","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6","name":"Azure_Security_Benchmark_v3.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log storage retention","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6","name":"Azure_Security_Benchmark_v3.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-7","category":"Logging and Threat Detection","title":"Use
-        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7","name":"Azure_Security_Benchmark_v3.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7","name":"Azure_Security_Benchmark_v3.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-1","category":"Network Security","title":"Establish
-        network segmentation boundaries ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1","name":"Azure_Security_Benchmark_v3.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network segmentation boundaries ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1","name":"Azure_Security_Benchmark_v3.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-10","category":"Network Security","title":"Ensure Domain
-        Name System (DNS) security","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10","name":"Azure_Security_Benchmark_v3.0_NS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Name System (DNS) security","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10","name":"Azure_Security_Benchmark_v3.0_NS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-2","category":"Network Security","title":"Secure cloud
-        services with network controls","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2","name":"Azure_Security_Benchmark_v3.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        services with network controls","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2","name":"Azure_Security_Benchmark_v3.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-3","category":"Network Security","title":"Deploy firewall
-        at the edge of enterprise network","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3","name":"Azure_Security_Benchmark_v3.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        at the edge of enterprise network","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3","name":"Azure_Security_Benchmark_v3.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-4","category":"Network Security","title":"Deploy intrusion
-        detection/intrusion prevention systems (IDS/IPS)","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4","name":"Azure_Security_Benchmark_v3.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        detection/intrusion prevention systems (IDS/IPS)","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4","name":"Azure_Security_Benchmark_v3.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-5","category":"Network Security","title":"Deploy DDOS
-        protection","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5","name":"Azure_Security_Benchmark_v3.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        protection","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5","name":"Azure_Security_Benchmark_v3.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-6","category":"Network Security","title":"Deploy web
-        application firewall","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6","name":"Azure_Security_Benchmark_v3.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application firewall","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6","name":"Azure_Security_Benchmark_v3.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-7","category":"Network Security","title":"Simplify network
-        security configuration","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7","name":"Azure_Security_Benchmark_v3.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security configuration","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7","name":"Azure_Security_Benchmark_v3.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-8","category":"Network Security","title":"Detect and
-        disable insecure services and protocols","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8","name":"Azure_Security_Benchmark_v3.0_NS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        disable insecure services and protocols","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8","name":"Azure_Security_Benchmark_v3.0_NS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-9","category":"Network Security","title":"Connect on-premises
-        or cloud network privately \n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9","name":"Azure_Security_Benchmark_v3.0_NS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        or cloud network privately \n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9","name":"Azure_Security_Benchmark_v3.0_NS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-1","category":"Privileged Access","title":"Separate
-        and limit highly privileged/administrative users","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1","name":"Azure_Security_Benchmark_v3.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and limit highly privileged/administrative users","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1","name":"Azure_Security_Benchmark_v3.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-2","category":"Privileged Access","title":"Avoid standing
-        access for accounts and permissions","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2","name":"Azure_Security_Benchmark_v3.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access for accounts and permissions","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2","name":"Azure_Security_Benchmark_v3.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-3","category":"Privileged Access","title":"Manage identity
-        and access lifecycle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3","name":"Azure_Security_Benchmark_v3.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and access lifecycle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3","name":"Azure_Security_Benchmark_v3.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-4","category":"Privileged Access","title":"Review and
-        reconcile user access regularly","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4","name":"Azure_Security_Benchmark_v3.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        reconcile user access regularly","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4","name":"Azure_Security_Benchmark_v3.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-5","category":"Privileged Access","title":"Set up emergency
-        access","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5","name":"Azure_Security_Benchmark_v3.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5","name":"Azure_Security_Benchmark_v3.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-6","category":"Privileged Access","title":"Use privileged
-        access workstations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6","name":"Azure_Security_Benchmark_v3.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access workstations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6","name":"Azure_Security_Benchmark_v3.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-7","category":"Privileged Access","title":"Follow just
-        enough administration (least privilege) principle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7","name":"Azure_Security_Benchmark_v3.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enough administration (least privilege) principle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7","name":"Azure_Security_Benchmark_v3.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-8","category":"Privileged Access","title":"Choose approval
-        process for third-party support\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8","name":"Azure_Security_Benchmark_v3.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        process for third-party support\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8","name":"Azure_Security_Benchmark_v3.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-1","category":"Posture and Vulnerability Management","title":"Define
-        and establish secure configurations ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1","name":"Azure_Security_Benchmark_v3.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and establish secure configurations ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1","name":"Azure_Security_Benchmark_v3.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-2","category":"Posture and Vulnerability Management","title":"Audit
-        and enforce secure configurations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2","name":"Azure_Security_Benchmark_v3.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and enforce secure configurations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2","name":"Azure_Security_Benchmark_v3.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-3","category":"Posture and Vulnerability Management","title":"Define
-        and establish secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3","name":"Azure_Security_Benchmark_v3.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and establish secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3","name":"Azure_Security_Benchmark_v3.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-4","category":"Posture and Vulnerability Management","title":"Audit
-        and enforce secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4","name":"Azure_Security_Benchmark_v3.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and enforce secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4","name":"Azure_Security_Benchmark_v3.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-5","category":"Posture and Vulnerability Management","title":"Perform
-        vulnerability assessments","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5","name":"Azure_Security_Benchmark_v3.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        vulnerability assessments","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5","name":"Azure_Security_Benchmark_v3.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-6","category":"Posture and Vulnerability Management","title":"Rapidly
-        and automatically remediate vulnerabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6","name":"Azure_Security_Benchmark_v3.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and automatically remediate vulnerabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6","name":"Azure_Security_Benchmark_v3.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-7","category":"Posture and Vulnerability Management","title":"Conduct
-        regular red team operations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7","name":"Azure_Security_Benchmark_v3.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular red team operations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7","name":"Azure_Security_Benchmark_v3.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-P1","category":"Asset Management","title":"All resources
-        deployed within your tenant are trackable via Azure Resource Graph","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_AM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_AM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        deployed within your tenant are trackable via Azure Resource Graph","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_AM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_AM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-P1","category":"Backup & Recovery","title":"Service
-        is recoverable from accidental/malicious data loss and data corruption","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        is recoverable from accidental/malicious data loss and data corruption","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-P2","category":"Backup & Recovery","title":"Services
         should automatically back up customer data managed by the service and/or allow
-        customers to configure backup for their data","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        customers to configure backup for their data","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P1","category":"Data Protection","title":"All sensitive
-        data is classified and labeled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data is classified and labeled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P2","category":"Data Protection","title":"Alerts will
-        be generated for anomalous data transfer for all services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        be generated for anomalous data transfer for all services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P3","category":"Data Protection","title":"All data is
-        encrypted in transit with strong protocols","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        encrypted in transit with strong protocols","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P4","category":"Data Protection","title":"All data is
-        encrypted at rest","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        encrypted at rest","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-P1","category":"Endpoint Security","title":"Anti-malware
-        solution is deployed & up-to-date on all endpoints","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_ES-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_ES-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        solution is deployed & up-to-date on all endpoints","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_ES-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_ES-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-P1","category":"Identity Management","title":"All service-to-service
-        & user authentication uses Azure Active Directory","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_IM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_IM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        & user authentication uses Azure Active Directory","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_IM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_IM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P1","category":"Logging & Threat Detection","title":"Azure
-        resources have threat detection enabled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        resources have threat detection enabled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P2","category":"Logging & Threat Detection","title":"Network
-        logs are collected for all Azure services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logs are collected for all Azure services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P3","category":"Logging & Threat Detection","title":"Security
-        logs are collected for all services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logs are collected for all services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P1","category":"Network Security","title":"Network firewalls
-        are enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        are enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P2","category":"Network Security","title":"Public network
-        access is disabled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access is disabled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P3","category":"Network Security","title":"DDoS protection
-        is enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        is enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P4","category":"Network Security","title":"Web Application
-        Firewall is enabled for all web workloads in a VNET or edge network locations","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Firewall is enabled for all web workloads in a VNET or edge network locations","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-P1","category":"Privileged Access","title":"No persistent
-        access exists","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access exists","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-P2","category":"Privileged Access","title":"Excessive
-        access is detected and removed","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access is detected and removed","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-P1","category":"Posture & Vulnerability Management","title":"Continuous
-        monitoring is enabled by Azure Security Center","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        monitoring is enabled by Azure Security Center","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-P2","category":"Posture & Vulnerability Management","title":"Only
-        secure images for compute resources can be used","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
+        secure images for compute resources can be used","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
         2.0 AC.L1-3.1.1","category":"Access Control","title":"Authorized Access Control","owner":"","additionalContentUrl":"https://www.acq.osd.mil/cmmc/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_AC.L1-3.1.1","name":"CMMC_2.0_AC.L1-3.1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
         2.0 AC.L1-3.1.2","category":"Access Control","title":"Transaction & Function
         Control","owner":"","additionalContentUrl":"https://www.acq.osd.mil/cmmc/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_AC.L1-3.1.2","name":"CMMC_2.0_AC.L1-3.1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
@@ -36544,183 +36544,183 @@ interactions:
         SP 800-53 Rev. 4 SI-8","category":"System and Information Integrity","title":"Spam
         Protection","owner":"Customer","additionalContentUrl":"https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control?version=4.0&number=SI-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/NIST_SP_800-53_R4_SI-8","name":"NIST_SP_800-53_R4_SI-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.1","category":"Network Security","title":"Protect resources
-        using Network Security Groups or Azure Firewall on your Virtual Network","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#11-protect-resources-using-network-security-groups-or-azure-firewall-on-your-virtual-network","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.1","name":"Azure_Security_Benchmark_v1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        using Network Security Groups or Azure Firewall on your Virtual Network","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#11-protect-resources-using-network-security-groups-or-azure-firewall-on-your-virtual-network","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.1","name":"Azure_Security_Benchmark_v1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.10","category":"Network Security","title":"Document traffic
-        configuration rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#110-document-traffic-configuration-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.10","name":"Azure_Security_Benchmark_v1.0_1.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        configuration rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#110-document-traffic-configuration-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.10","name":"Azure_Security_Benchmark_v1.0_1.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.11","category":"Network Security","title":"Use automated
-        tools to monitor network resource configurations and detect changes","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#111-use-automated-tools-to-monitor-network-resource-configurations-and-detect-changes","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.11","name":"Azure_Security_Benchmark_v1.0_1.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        tools to monitor network resource configurations and detect changes","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#111-use-automated-tools-to-monitor-network-resource-configurations-and-detect-changes","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.11","name":"Azure_Security_Benchmark_v1.0_1.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.2","category":"Network Security","title":"Monitor and
-        log the configuration and traffic of Vnets, Subnets, and NICs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#12-monitor-and-log-the-configuration-and-traffic-of-vnets-subnets-and-nics","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.2","name":"Azure_Security_Benchmark_v1.0_1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log the configuration and traffic of Vnets, Subnets, and NICs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#12-monitor-and-log-the-configuration-and-traffic-of-vnets-subnets-and-nics","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.2","name":"Azure_Security_Benchmark_v1.0_1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.3","category":"Network Security","title":"Protect critical
-        web applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#13-protect-critical-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.3","name":"Azure_Security_Benchmark_v1.0_1.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        web applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#13-protect-critical-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.3","name":"Azure_Security_Benchmark_v1.0_1.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.4","category":"Network Security","title":"Deny communications
-        with known malicious IP addresses","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#14-deny-communications-with-known-malicious-ip-addresses","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.4","name":"Azure_Security_Benchmark_v1.0_1.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        with known malicious IP addresses","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#14-deny-communications-with-known-malicious-ip-addresses","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.4","name":"Azure_Security_Benchmark_v1.0_1.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.5","category":"Network Security","title":"Record network
-        packets and flow logs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#15-record-network-packets-and-flow-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.5","name":"Azure_Security_Benchmark_v1.0_1.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        packets and flow logs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#15-record-network-packets-and-flow-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.5","name":"Azure_Security_Benchmark_v1.0_1.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.6","category":"Network Security","title":"Deploy network
-        based intrusion detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#16-deploy-network-based-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.6","name":"Azure_Security_Benchmark_v1.0_1.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        based intrusion detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#16-deploy-network-based-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.6","name":"Azure_Security_Benchmark_v1.0_1.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.7","category":"Network Security","title":"Manage traffic
-        to web applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#17-manage-traffic-to-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.7","name":"Azure_Security_Benchmark_v1.0_1.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to web applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#17-manage-traffic-to-web-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.7","name":"Azure_Security_Benchmark_v1.0_1.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.8","category":"Network Security","title":"Minimize complexity
-        and administrative overhead of network security rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#18-minimize-complexity-and-administrative-overhead-of-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.8","name":"Azure_Security_Benchmark_v1.0_1.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and administrative overhead of network security rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#18-minimize-complexity-and-administrative-overhead-of-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.8","name":"Azure_Security_Benchmark_v1.0_1.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 1.9","category":"Network Security","title":"Maintain standard
-        security configurations for network devices","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#19-maintain-standard-security-configurations-for-network-devices","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.9","name":"Azure_Security_Benchmark_v1.0_1.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security configurations for network devices","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-network-security#19-maintain-standard-security-configurations-for-network-devices","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_1.9","name":"Azure_Security_Benchmark_v1.0_1.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.1","category":"Incident Response","title":"Create an
-        incident response guide","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#101-create-an-incident-response-guide","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.1","name":"Azure_Security_Benchmark_v1.0_10.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident response guide","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#101-create-an-incident-response-guide","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.1","name":"Azure_Security_Benchmark_v1.0_10.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.2","category":"Incident Response","title":"Create an
-        incident scoring and prioritization procedure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#102-create-an-incident-scoring-and-prioritization-procedure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.2","name":"Azure_Security_Benchmark_v1.0_10.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident scoring and prioritization procedure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#102-create-an-incident-scoring-and-prioritization-procedure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.2","name":"Azure_Security_Benchmark_v1.0_10.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.3","category":"Incident Response","title":"Test security
-        response procedures","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises#111-conduct-regular-penetration-testing-of-your-azure-resources-and-ensure-remediation-of-all-critical-security-findings-within-60-days","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.3","name":"Azure_Security_Benchmark_v1.0_10.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        response procedures","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-penetration-tests-red-team-exercises#111-conduct-regular-penetration-testing-of-your-azure-resources-and-ensure-remediation-of-all-critical-security-findings-within-60-days","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.3","name":"Azure_Security_Benchmark_v1.0_10.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.4","category":"Incident Response","title":"Provide security
-        incident contact details and configure alert notifications for security incidents","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#103-test-security-response-procedures","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.4","name":"Azure_Security_Benchmark_v1.0_10.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        incident contact details and configure alert notifications for security incidents","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#103-test-security-response-procedures","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.4","name":"Azure_Security_Benchmark_v1.0_10.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.5","category":"Incident Response","title":"Incorporate
-        security alerts into your incident response system","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#104-provide-security-incident-contact-details-and-configure-alert-notifications-for-security-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.5","name":"Azure_Security_Benchmark_v1.0_10.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security alerts into your incident response system","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#104-provide-security-incident-contact-details-and-configure-alert-notifications-for-security-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.5","name":"Azure_Security_Benchmark_v1.0_10.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 10.6","category":"Incident Response","title":"Automate
-        the response to security alerts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#105-incorporate-security-alerts-into-your-incident-response-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.6","name":"Azure_Security_Benchmark_v1.0_10.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        the response to security alerts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#105-incorporate-security-alerts-into-your-incident-response-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_10.6","name":"Azure_Security_Benchmark_v1.0_10.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 11.1","category":"Penetration Tests and Red Team Exercises","title":"Conduct
         regular penetration testing of your Azure resources and ensure remediation
-        of all critical security findings within 60 days","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#106-automate-the-response-to-security-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_11.1","name":"Azure_Security_Benchmark_v1.0_11.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of all critical security findings within 60 days","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-incident-response#106-automate-the-response-to-security-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_11.1","name":"Azure_Security_Benchmark_v1.0_11.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.1","category":"Logging and Monitoring","title":"Use approved
-        time synchronization sources","owner":"Microsoft","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#21-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.1","name":"Azure_Security_Benchmark_v1.0_2.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        time synchronization sources","owner":"Microsoft","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#21-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.1","name":"Azure_Security_Benchmark_v1.0_2.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.10","category":"Logging and Monitoring","title":"Enable
-        command-line audit logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#210-enable-command-line-audit-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.10","name":"Azure_Security_Benchmark_v1.0_2.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        command-line audit logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#210-enable-command-line-audit-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.10","name":"Azure_Security_Benchmark_v1.0_2.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.2","category":"Logging and Monitoring","title":"Configure
-        central security log management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#22-configure-central-security-log-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.2","name":"Azure_Security_Benchmark_v1.0_2.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        central security log management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#22-configure-central-security-log-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.2","name":"Azure_Security_Benchmark_v1.0_2.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.3","category":"Logging and Monitoring","title":"Enable
-        audit logging for Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#23-enable-audit-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.3","name":"Azure_Security_Benchmark_v1.0_2.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        audit logging for Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#23-enable-audit-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.3","name":"Azure_Security_Benchmark_v1.0_2.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.4","category":"Logging and Monitoring","title":"Collect
-        security logs from operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#24-collect-security-logs-from-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.4","name":"Azure_Security_Benchmark_v1.0_2.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security logs from operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#24-collect-security-logs-from-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.4","name":"Azure_Security_Benchmark_v1.0_2.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.5","category":"Logging and Monitoring","title":"Configure
-        security log storage retention","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#25-configure-security-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.5","name":"Azure_Security_Benchmark_v1.0_2.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log storage retention","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#25-configure-security-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.5","name":"Azure_Security_Benchmark_v1.0_2.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.6","category":"Logging and Monitoring","title":"Monitor
-        and review Logs","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#26-monitor-and-review-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.6","name":"Azure_Security_Benchmark_v1.0_2.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and review Logs","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#26-monitor-and-review-logs","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.6","name":"Azure_Security_Benchmark_v1.0_2.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.7","category":"Logging and Monitoring","title":"Enable
-        alerts for anomalous activity","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#27-enable-alerts-for-anomalous-activity","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.7","name":"Azure_Security_Benchmark_v1.0_2.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        alerts for anomalous activity","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#27-enable-alerts-for-anomalous-activity","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.7","name":"Azure_Security_Benchmark_v1.0_2.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.8","category":"Logging and Monitoring","title":"Centralize
-        anti-malware logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#28-centralize-anti-malware-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.8","name":"Azure_Security_Benchmark_v1.0_2.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        anti-malware logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#28-centralize-anti-malware-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.8","name":"Azure_Security_Benchmark_v1.0_2.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 2.9","category":"Logging and Monitoring","title":"Enable
-        DNS query logging","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#29-enable-dns-query-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.9","name":"Azure_Security_Benchmark_v1.0_2.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        DNS query logging","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring#29-enable-dns-query-logging","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_2.9","name":"Azure_Security_Benchmark_v1.0_2.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.1","category":"Identity and Access Control","title":"Maintain
-        an inventory of administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#31-maintain-an-inventory-of-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.1","name":"Azure_Security_Benchmark_v1.0_3.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        an inventory of administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#31-maintain-an-inventory-of-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.1","name":"Azure_Security_Benchmark_v1.0_3.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.10","category":"Identity and Access Control","title":"Regularly
-        review and reconcile user access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#310-regularly-review-and-reconcile-user-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.10","name":"Azure_Security_Benchmark_v1.0_3.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        review and reconcile user access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#310-regularly-review-and-reconcile-user-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.10","name":"Azure_Security_Benchmark_v1.0_3.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.11","category":"Identity and Access Control","title":"Monitor
-        attempts to access deactivated accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#311-monitor-attempts-to-access-deactivated-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.11","name":"Azure_Security_Benchmark_v1.0_3.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        attempts to access deactivated accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#311-monitor-attempts-to-access-deactivated-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.11","name":"Azure_Security_Benchmark_v1.0_3.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.12","category":"Identity and Access Control","title":"Alert
-        on account login behavior deviation","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#312-alert-on-account-login-behavior-deviation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.12","name":"Azure_Security_Benchmark_v1.0_3.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        on account login behavior deviation","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#312-alert-on-account-login-behavior-deviation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.12","name":"Azure_Security_Benchmark_v1.0_3.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.13","category":"Identity and Access Control","title":"Provide
-        Microsoft with access to relevant customer data during support scenarios","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#313-provide-microsoft-with-access-to-relevant-customer-data-during-support-scenarios","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.13","name":"Azure_Security_Benchmark_v1.0_3.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Microsoft with access to relevant customer data during support scenarios","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#313-provide-microsoft-with-access-to-relevant-customer-data-during-support-scenarios","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.13","name":"Azure_Security_Benchmark_v1.0_3.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.2","category":"Identity and Access Control","title":"Change
-        default passwords where applicable","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#32-change-default-passwords-where-applicable","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.2","name":"Azure_Security_Benchmark_v1.0_3.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        default passwords where applicable","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#32-change-default-passwords-where-applicable","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.2","name":"Azure_Security_Benchmark_v1.0_3.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.3","category":"Identity and Access Control","title":"Use
-        dedicated administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#33-use-dedicated-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.3","name":"Azure_Security_Benchmark_v1.0_3.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        dedicated administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#33-use-dedicated-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.3","name":"Azure_Security_Benchmark_v1.0_3.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.4","category":"Identity and Access Control","title":"Use
-        single sign-on (SSO) with Azure Active Directory","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#34-use-single-sign-on-sso-with-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.4","name":"Azure_Security_Benchmark_v1.0_3.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        single sign-on (SSO) with Azure Active Directory","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#34-use-single-sign-on-sso-with-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.4","name":"Azure_Security_Benchmark_v1.0_3.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.5","category":"Identity and Access Control","title":"Use
-        multi-factor authentication for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#35-use-multi-factor-authentication-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.5","name":"Azure_Security_Benchmark_v1.0_3.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        multi-factor authentication for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#35-use-multi-factor-authentication-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.5","name":"Azure_Security_Benchmark_v1.0_3.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.6","category":"Identity and Access Control","title":"Use
         dedicated machines (Privileged Access Workstations) for all administrative
-        tasks","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#36-use-dedicated-machines-privileged-access-workstations-for-all-administrative-tasks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.6","name":"Azure_Security_Benchmark_v1.0_3.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        tasks","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#36-use-dedicated-machines-privileged-access-workstations-for-all-administrative-tasks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.6","name":"Azure_Security_Benchmark_v1.0_3.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.7","category":"Identity and Access Control","title":"Log
-        and alert on suspicious activity from administrative accounts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#37-log-and-alert-on-suspicious-activity-from-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.7","name":"Azure_Security_Benchmark_v1.0_3.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and alert on suspicious activity from administrative accounts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#37-log-and-alert-on-suspicious-activity-from-administrative-accounts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.7","name":"Azure_Security_Benchmark_v1.0_3.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.8","category":"Identity and Access Control","title":"Manage
-        Azure resources from only approved locations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#38-manage-azure-resources-from-only-approved-locations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.8","name":"Azure_Security_Benchmark_v1.0_3.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure resources from only approved locations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#38-manage-azure-resources-from-only-approved-locations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.8","name":"Azure_Security_Benchmark_v1.0_3.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 3.9","category":"Identity and Access Control","title":"Use
-        Azure Active Directory","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#39-use-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.9","name":"Azure_Security_Benchmark_v1.0_3.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Active Directory","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-identity-access-control#39-use-azure-active-directory","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_3.9","name":"Azure_Security_Benchmark_v1.0_3.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.1","category":"Data Protection","title":"Maintain an
-        inventory of sensitive Information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#41-maintain-an-inventory-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.1","name":"Azure_Security_Benchmark_v1.0_4.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        inventory of sensitive Information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#41-maintain-an-inventory-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.1","name":"Azure_Security_Benchmark_v1.0_4.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.2","category":"Data Protection","title":"Isolate systems
-        storing or processing sensitive information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#42-isolate-systems-storing-or-processing-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.2","name":"Azure_Security_Benchmark_v1.0_4.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        storing or processing sensitive information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#42-isolate-systems-storing-or-processing-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.2","name":"Azure_Security_Benchmark_v1.0_4.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.3","category":"Data Protection","title":"Monitor and
-        block unauthorized transfer of sensitive information","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#43-monitor-and-block-unauthorized-transfer-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.3","name":"Azure_Security_Benchmark_v1.0_4.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        block unauthorized transfer of sensitive information","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#43-monitor-and-block-unauthorized-transfer-of-sensitive-information","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.3","name":"Azure_Security_Benchmark_v1.0_4.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.4","category":"Data Protection","title":"Encrypt all
-        sensitive information in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#44-encrypt-all-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.4","name":"Azure_Security_Benchmark_v1.0_4.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        sensitive information in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#44-encrypt-all-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.4","name":"Azure_Security_Benchmark_v1.0_4.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.5","category":"Data Protection","title":"Use an active
-        discovery tool to identify sensitive data","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#45-use-an-active-discovery-tool-to-identify-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.5","name":"Azure_Security_Benchmark_v1.0_4.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        discovery tool to identify sensitive data","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#45-use-an-active-discovery-tool-to-identify-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.5","name":"Azure_Security_Benchmark_v1.0_4.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.6","category":"Data Protection","title":"Use Azure RBAC
-        to control access to resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#46-use-azure-rbac-to-control-access-to-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.6","name":"Azure_Security_Benchmark_v1.0_4.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to control access to resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#46-use-azure-rbac-to-control-access-to-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.6","name":"Azure_Security_Benchmark_v1.0_4.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.7","category":"Data Protection","title":"Use host-based
-        data loss prevention to enforce access control","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#47-use-host-based-data-loss-prevention-to-enforce-access-control","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.7","name":"Azure_Security_Benchmark_v1.0_4.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data loss prevention to enforce access control","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#47-use-host-based-data-loss-prevention-to-enforce-access-control","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.7","name":"Azure_Security_Benchmark_v1.0_4.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.8","category":"Data Protection","title":"Encrypt sensitive
-        information at rest","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#48-encrypt-sensitive-information-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.8","name":"Azure_Security_Benchmark_v1.0_4.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        information at rest","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#48-encrypt-sensitive-information-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.8","name":"Azure_Security_Benchmark_v1.0_4.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 4.9","category":"Data Protection","title":"Log and alert
-        on changes to critical Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#49-log-and-alert-on-changes-to-critical-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.9","name":"Azure_Security_Benchmark_v1.0_4.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        on changes to critical Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-protection#49-log-and-alert-on-changes-to-critical-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_4.9","name":"Azure_Security_Benchmark_v1.0_4.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.1","category":"Vulnerability Management","title":"Run
-        automated vulnerability scanning tools","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.1","name":"Azure_Security_Benchmark_v1.0_5.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated vulnerability scanning tools","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.1","name":"Azure_Security_Benchmark_v1.0_5.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.2","category":"Vulnerability Management","title":"Deploy
-        automated operating system patch management solution","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#52-deploy-automated-operating-system-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.2","name":"Azure_Security_Benchmark_v1.0_5.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated operating system patch management solution","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#52-deploy-automated-operating-system-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.2","name":"Azure_Security_Benchmark_v1.0_5.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.3","category":"Vulnerability Management","title":"Deploy
-        automated third-party software patch management solution","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#53-deploy-automated-third-party-software-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.3","name":"Azure_Security_Benchmark_v1.0_5.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated third-party software patch management solution","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#53-deploy-automated-third-party-software-patch-management-solution","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.3","name":"Azure_Security_Benchmark_v1.0_5.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.4","category":"Vulnerability Management","title":"Compare
-        back-to-back vulnerability scans","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#54-compare-back-to-back-vulnerability-scans","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.4","name":"Azure_Security_Benchmark_v1.0_5.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        back-to-back vulnerability scans","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#54-compare-back-to-back-vulnerability-scans","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.4","name":"Azure_Security_Benchmark_v1.0_5.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 5.5","category":"Vulnerability Management","title":"Use
-        a risk-rating process to prioritize the remediation of discovered vulnerabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#55-use-a-risk-rating-process-to-prioritize-the-remediation-of-discovered-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.5","name":"Azure_Security_Benchmark_v1.0_5.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        a risk-rating process to prioritize the remediation of discovered vulnerabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-vulnerability-management#55-use-a-risk-rating-process-to-prioritize-the-remediation-of-discovered-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_5.5","name":"Azure_Security_Benchmark_v1.0_5.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.1","category":"Inventory and Asset Management","title":"Use
-        Azure Asset Discovery","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#61-use-azure-asset-discovery","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.1","name":"Azure_Security_Benchmark_v1.0_6.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Asset Discovery","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#61-use-azure-asset-discovery","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.1","name":"Azure_Security_Benchmark_v1.0_6.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.10","category":"Inventory and Asset Management","title":"Implement
-        approved application list","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#610-implement-approved-application-list","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.10","name":"Azure_Security_Benchmark_v1.0_6.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved application list","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#610-implement-approved-application-list","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.10","name":"Azure_Security_Benchmark_v1.0_6.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.11","category":"Inventory and Asset Management","title":"Limit
-        users'' ability to interact with AzureResources Manager via scripts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#611-limit-users-ability-to-interact-with-azure-resource-manager-via-scripts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.11","name":"Azure_Security_Benchmark_v1.0_6.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        users'' ability to interact with AzureResources Manager via scripts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#611-limit-users-ability-to-interact-with-azure-resource-manager-via-scripts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.11","name":"Azure_Security_Benchmark_v1.0_6.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.12","category":"Inventory and Asset Management","title":"Limit
-        users'' ability to execute scripts within compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#612-limit-users-ability-to-execute-scripts-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.12","name":"Azure_Security_Benchmark_v1.0_6.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        users'' ability to execute scripts within compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#612-limit-users-ability-to-execute-scripts-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.12","name":"Azure_Security_Benchmark_v1.0_6.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.13","category":"Inventory and Asset Management","title":"Physically
-        or logically segregate high risk applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#613-physically-or-logically-segregate-high-risk-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.13","name":"Azure_Security_Benchmark_v1.0_6.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        or logically segregate high risk applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#613-physically-or-logically-segregate-high-risk-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.13","name":"Azure_Security_Benchmark_v1.0_6.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.2","category":"Inventory and Asset Management","title":"Maintain
-        asset metadata","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#62-maintain-asset-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.2","name":"Azure_Security_Benchmark_v1.0_6.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        asset metadata","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#62-maintain-asset-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.2","name":"Azure_Security_Benchmark_v1.0_6.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.3","category":"Inventory and Asset Management","title":"Delete
-        unauthorized Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#63-delete-unauthorized-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.3","name":"Azure_Security_Benchmark_v1.0_6.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unauthorized Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#63-delete-unauthorized-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.3","name":"Azure_Security_Benchmark_v1.0_6.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.4","category":"Inventory and Asset Management","title":"Maintain
-        an inventory of approved Azure resources and software titles","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#64-maintain-an-inventory-of-approved-azure-resources-and-software-titles","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.4","name":"Azure_Security_Benchmark_v1.0_6.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        an inventory of approved Azure resources and software titles","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#64-maintain-an-inventory-of-approved-azure-resources-and-software-titles","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.4","name":"Azure_Security_Benchmark_v1.0_6.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.5","category":"Inventory and Asset Management","title":"Monitor
-        for unapproved Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#65-monitor-for-unapproved-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.5","name":"Azure_Security_Benchmark_v1.0_6.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        for unapproved Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#65-monitor-for-unapproved-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.5","name":"Azure_Security_Benchmark_v1.0_6.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.6","category":"Inventory and Asset Management","title":"Monitor
-        for unapproved software applications within compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#66-monitor-for-unapproved-software-applications-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.6","name":"Azure_Security_Benchmark_v1.0_6.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        for unapproved software applications within compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#66-monitor-for-unapproved-software-applications-within-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.6","name":"Azure_Security_Benchmark_v1.0_6.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.7","category":"Inventory and Asset Management","title":"Remove
-        unapproved Azure resources and software applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#67-remove-unapproved-azure-resources-and-software-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.7","name":"Azure_Security_Benchmark_v1.0_6.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unapproved Azure resources and software applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#67-remove-unapproved-azure-resources-and-software-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.7","name":"Azure_Security_Benchmark_v1.0_6.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.8","category":"Inventory and Asset Management","title":"Use
-        only approved applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#68-use-only-approved-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.8","name":"Azure_Security_Benchmark_v1.0_6.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        only approved applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#68-use-only-approved-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.8","name":"Azure_Security_Benchmark_v1.0_6.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 6.9","category":"Inventory and Asset Management","title":"Use
-        only approved Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#69-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.9","name":"Azure_Security_Benchmark_v1.0_6.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        only approved Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-inventory-asset-management#69-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_6.9","name":"Azure_Security_Benchmark_v1.0_6.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.1","category":"Secure Configuration","title":"Establish
-        secure configurations for all Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#71-establish-secure-configurations-for-all-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.1","name":"Azure_Security_Benchmark_v1.0_7.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for all Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#71-establish-secure-configurations-for-all-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.1","name":"Azure_Security_Benchmark_v1.0_7.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.10","category":"Secure Configuration","title":"Implement
-        automated configuration monitoring for operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#710-implement-automated-configuration-monitoring-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.10","name":"Azure_Security_Benchmark_v1.0_7.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated configuration monitoring for operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#710-implement-automated-configuration-monitoring-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.10","name":"Azure_Security_Benchmark_v1.0_7.10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.11","category":"Secure Configuration","title":"Manage
-        Azure secrets securely","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#711-manage-azure-secrets-securely","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.11","name":"Azure_Security_Benchmark_v1.0_7.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure secrets securely","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#711-manage-azure-secrets-securely","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.11","name":"Azure_Security_Benchmark_v1.0_7.11","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.12","category":"Secure Configuration","title":"Manage
-        identities securely and automatically","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#712-manage-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.12","name":"Azure_Security_Benchmark_v1.0_7.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identities securely and automatically","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#712-manage-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.12","name":"Azure_Security_Benchmark_v1.0_7.12","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.13","category":"Secure Configuration","title":"Eliminate
-        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#713-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.13","name":"Azure_Security_Benchmark_v1.0_7.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#713-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.13","name":"Azure_Security_Benchmark_v1.0_7.13","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.2","category":"Secure Configuration","title":"Establish
-        secure operating system configurations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#72-establish-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.2","name":"Azure_Security_Benchmark_v1.0_7.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure operating system configurations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#72-establish-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.2","name":"Azure_Security_Benchmark_v1.0_7.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.3","category":"Secure Configuration","title":"Maintain
-        secure Azure resource configurations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#73-maintain-secure-azure-resource-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.3","name":"Azure_Security_Benchmark_v1.0_7.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure Azure resource configurations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#73-maintain-secure-azure-resource-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.3","name":"Azure_Security_Benchmark_v1.0_7.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.4","category":"Secure Configuration","title":"Maintain
-        secure operating system configurations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#74-maintain-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.4","name":"Azure_Security_Benchmark_v1.0_7.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure operating system configurations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#74-maintain-secure-operating-system-configurations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.4","name":"Azure_Security_Benchmark_v1.0_7.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.5","category":"Secure Configuration","title":"Securely
-        store configuration of Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#75-securely-store-configuration-of-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.5","name":"Azure_Security_Benchmark_v1.0_7.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store configuration of Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#75-securely-store-configuration-of-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.5","name":"Azure_Security_Benchmark_v1.0_7.5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.6","category":"Secure Configuration","title":"Securely
-        store custom operating system images","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#76-securely-store-custom-operating-system-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.6","name":"Azure_Security_Benchmark_v1.0_7.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store custom operating system images","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#76-securely-store-custom-operating-system-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.6","name":"Azure_Security_Benchmark_v1.0_7.6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.7","category":"Secure Configuration","title":"Deploy
-        system configuration management tools","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#77-deploy-system-configuration-management-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.7","name":"Azure_Security_Benchmark_v1.0_7.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system configuration management tools","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#77-deploy-system-configuration-management-tools","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.7","name":"Azure_Security_Benchmark_v1.0_7.7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.8","category":"Secure Configuration","title":"Deploy
-        system configuration management tools for operating systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#78-deploy-system-configuration-management-tools-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.8","name":"Azure_Security_Benchmark_v1.0_7.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system configuration management tools for operating systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#78-deploy-system-configuration-management-tools-for-operating-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.8","name":"Azure_Security_Benchmark_v1.0_7.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 7.9","category":"Secure Configuration","title":"Implement
-        automated configuration monitoring for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#79-implement-automated-configuration-monitoring-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.9","name":"Azure_Security_Benchmark_v1.0_7.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated configuration monitoring for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-secure-configuration#79-implement-automated-configuration-monitoring-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_7.9","name":"Azure_Security_Benchmark_v1.0_7.9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.1","category":"Malware Defense","title":"Use centrally
-        managed anti-malware software","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#81-use-centrally-managed-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.1","name":"Azure_Security_Benchmark_v1.0_8.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        managed anti-malware software","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#81-use-centrally-managed-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.1","name":"Azure_Security_Benchmark_v1.0_8.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.2","category":"Malware Defense","title":"Pre-scan files
-        to be uploaded to non-compute Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#82-pre-scan-files-to-be-uploaded-to-non-compute-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.2","name":"Azure_Security_Benchmark_v1.0_8.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to be uploaded to non-compute Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#82-pre-scan-files-to-be-uploaded-to-non-compute-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.2","name":"Azure_Security_Benchmark_v1.0_8.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 8.3","category":"Malware Defense","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#83-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.3","name":"Azure_Security_Benchmark_v1.0_8.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-malware-defense#83-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_8.3","name":"Azure_Security_Benchmark_v1.0_8.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.1","category":"Data Recovery","title":"Ensure regular
-        automated back ups","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#91-ensure-regular-automated-back-ups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.1","name":"Azure_Security_Benchmark_v1.0_9.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        automated back ups","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#91-ensure-regular-automated-back-ups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.1","name":"Azure_Security_Benchmark_v1.0_9.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.2","category":"Data Recovery","title":"Perform complete
-        system backups and backup any customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#92-perform-complete-system-backups-and-backup-any-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.2","name":"Azure_Security_Benchmark_v1.0_9.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        system backups and backup any customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#92-perform-complete-system-backups-and-backup-any-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.2","name":"Azure_Security_Benchmark_v1.0_9.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.3","category":"Data Recovery","title":"Validate all backups
-        including customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#93-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.3","name":"Azure_Security_Benchmark_v1.0_9.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        including customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#93-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.3","name":"Azure_Security_Benchmark_v1.0_9.3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark 9.4","category":"Data Recovery","title":"Ensure protection
-        of backups and customer managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#94-ensure-protection-of-backups-and-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.4","name":"Azure_Security_Benchmark_v1.0_9.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
+        of backups and customer managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/en-us/azure/security/benchmarks/security-control-data-recovery#94-ensure-protection-of-backups-and-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v1.0_9.4","name":"Azure_Security_Benchmark_v1.0_9.4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
         Microsoft Azure Foundations Benchmark recommendation 1.1","category":"Identity
         and Access Management","title":"Ensure that multi-factor authentication is
         enabled for all privileged users","owner":"Customer","additionalContentUrl":"https://www.cisecurity.org/benchmark/azure/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.1.0_1.1","name":"CIS_Azure_1.1.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
@@ -39456,145 +39456,145 @@ interactions:
         organization has implemented technical means to ensure covered information
         is stored in organization-specified locations.","owner":"Customer","additionalContentUrl":"","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/hipaa-19245.06d2Organizational.2-06.d","name":"hipaa-19245.06d2Organizational.2-06.d","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-1","category":"Asset Management","title":"Ensure security
-        team has visibility into risks for assets","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-1-ensure-security-team-has-visibility-into-risks-for-assets","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-1","name":"Azure_Security_Benchmark_v2.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        team has visibility into risks for assets","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-1-ensure-security-team-has-visibility-into-risks-for-assets","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-1","name":"Azure_Security_Benchmark_v2.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-2","category":"Asset Management","title":"Ensure security
-        team has access to asset inventory and metadata","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-2-ensure-security-team-has-access-to-asset-inventory-and-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-2","name":"Azure_Security_Benchmark_v2.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        team has access to asset inventory and metadata","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-2-ensure-security-team-has-access-to-asset-inventory-and-metadata","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-2","name":"Azure_Security_Benchmark_v2.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-3","category":"Asset Management","title":"Use only approved
-        Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-3-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-3","name":"Azure_Security_Benchmark_v2.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-3-use-only-approved-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-3","name":"Azure_Security_Benchmark_v2.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-4","category":"Asset Management","title":"Ensure security
-        of asset lifecycle management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-4-ensure-security-of-asset-lifecycle-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-4","name":"Azure_Security_Benchmark_v2.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of asset lifecycle management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-4-ensure-security-of-asset-lifecycle-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-4","name":"Azure_Security_Benchmark_v2.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-5","category":"Asset Management","title":"Limit users''
-        ability to interact with Azure Resource Manager","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-5-limit-users-ability-to-interact-with-azure-resource-manager","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-5","name":"Azure_Security_Benchmark_v2.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        ability to interact with Azure Resource Manager","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-5-limit-users-ability-to-interact-with-azure-resource-manager","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-5","name":"Azure_Security_Benchmark_v2.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-6","category":"Asset Management","title":"Use only approved
-        applications in compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-6-use-only-approved-applications-in-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-6","name":"Azure_Security_Benchmark_v2.0_AM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        applications in compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-asset-management#am-6-use-only-approved-applications-in-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_AM-6","name":"Azure_Security_Benchmark_v2.0_AM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-1","category":"Backup and Recovery","title":"Ensure
-        regular automated backups","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-1-ensure-regular-automated-backups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-1","name":"Azure_Security_Benchmark_v2.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular automated backups","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-1-ensure-regular-automated-backups","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-1","name":"Azure_Security_Benchmark_v2.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-2","category":"Backup and Recovery","title":"Encrypt
-        backup data","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-2-encrypt-backup-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-2","name":"Azure_Security_Benchmark_v2.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup data","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-2-encrypt-backup-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-2","name":"Azure_Security_Benchmark_v2.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-3","category":"Backup and Recovery","title":"Validate
-        all backups including customer-managed keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-3-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-3","name":"Azure_Security_Benchmark_v2.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        all backups including customer-managed keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-3-validate-all-backups-including-customer-managed-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-3","name":"Azure_Security_Benchmark_v2.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-4","category":"Backup and Recovery","title":"Mitigate
-        risk of lost keys","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-4-mitigate-risk-of-lost-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-4","name":"Azure_Security_Benchmark_v2.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        risk of lost keys","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-backup-recovery#br-4-mitigate-risk-of-lost-keys","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_BR-4","name":"Azure_Security_Benchmark_v2.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-1","category":"Data Protection","title":"Discovery,
-        classify and label sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-1-discovery-classify-and-label-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-1","name":"Azure_Security_Benchmark_v2.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        classify and label sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-1-discovery-classify-and-label-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-1","name":"Azure_Security_Benchmark_v2.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-2","category":"Data Protection","title":"Protect sensitive
-        data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-2-protect-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-2","name":"Azure_Security_Benchmark_v2.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-2-protect-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-2","name":"Azure_Security_Benchmark_v2.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-3","category":"Data Protection","title":"Monitor for
-        unauthorized transfer of sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-3-monitor-for-unauthorized-transfer-of-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-3","name":"Azure_Security_Benchmark_v2.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unauthorized transfer of sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-3-monitor-for-unauthorized-transfer-of-sensitive-data","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-3","name":"Azure_Security_Benchmark_v2.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-4","category":"Data Protection","title":"Encrypt sensitive
-        information in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-4-encrypt-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-4","name":"Azure_Security_Benchmark_v2.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        information in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-4-encrypt-sensitive-information-in-transit","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-4","name":"Azure_Security_Benchmark_v2.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-5","category":"Data Protection","title":"Encrypt sensitive
-        data at rest","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-5-encrypt-sensitive-data-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-5","name":"Azure_Security_Benchmark_v2.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data at rest","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-data-protection#dp-5-encrypt-sensitive-data-at-rest","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_DP-5","name":"Azure_Security_Benchmark_v2.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-1","category":"Endpoint Security","title":"Use Endpoint
-        Detection and Response (EDR)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-1-use-endpoint-detection-and-response-edr","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-1","name":"Azure_Security_Benchmark_v2.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Detection and Response (EDR)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-1-use-endpoint-detection-and-response-edr","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-1","name":"Azure_Security_Benchmark_v2.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-2","category":"Endpoint Security","title":"Use centrally
-        managed modern anti-malware software","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-2-use-centrally-managed-modern-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-2","name":"Azure_Security_Benchmark_v2.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        managed modern anti-malware software","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-2-use-centrally-managed-modern-anti-malware-software","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-2","name":"Azure_Security_Benchmark_v2.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-3","category":"Endpoint Security","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-3-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-3","name":"Azure_Security_Benchmark_v2.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-endpoint-security#es-3-ensure-anti-malware-software-and-signatures-are-updated","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_ES-3","name":"Azure_Security_Benchmark_v2.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-1","category":"Governance and Strategy","title":"Define
-        asset management and data protection strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-1-define-asset-management-and-data-protection-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-1","name":"Azure_Security_Benchmark_v2.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        asset management and data protection strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-1-define-asset-management-and-data-protection-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-1","name":"Azure_Security_Benchmark_v2.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-2","category":"Governance and Strategy","title":"Define
-        enterprise segmentation strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-2-define-enterprise-segmentation-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-2","name":"Azure_Security_Benchmark_v2.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enterprise segmentation strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-2-define-enterprise-segmentation-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-2","name":"Azure_Security_Benchmark_v2.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-3","category":"Governance and Strategy","title":"Define
-        security posture management strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-3-define-security-posture-management-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-3","name":"Azure_Security_Benchmark_v2.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security posture management strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-3-define-security-posture-management-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-3","name":"Azure_Security_Benchmark_v2.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-4","category":"Governance and Strategy","title":"Align
-        organization roles, responsibilities, and accountabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-4-align-organization-roles-responsibilities-and-accountabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-4","name":"Azure_Security_Benchmark_v2.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        organization roles, responsibilities, and accountabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-4-align-organization-roles-responsibilities-and-accountabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-4","name":"Azure_Security_Benchmark_v2.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-5","category":"Governance and Strategy","title":"Define
-        network security strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-5-define-network-security-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-5","name":"Azure_Security_Benchmark_v2.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network security strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-5-define-network-security-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-5","name":"Azure_Security_Benchmark_v2.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-6","category":"Governance and Strategy","title":"Define
-        identity and privileged access strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-6-define-identity-and-privileged-access-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-6","name":"Azure_Security_Benchmark_v2.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and privileged access strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-6-define-identity-and-privileged-access-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-6","name":"Azure_Security_Benchmark_v2.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-7","category":"Governance and Strategy","title":"Define
-        logging and threat response strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-7-define-logging-and-threat-response-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-7","name":"Azure_Security_Benchmark_v2.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging and threat response strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-7-define-logging-and-threat-response-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-7","name":"Azure_Security_Benchmark_v2.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-8","category":"Governance and Strategy","title":"Define
-        backup and recovery strategy","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-8-define-backup-and-recovery-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-8","name":"Azure_Security_Benchmark_v2.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup and recovery strategy","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-governance-strategy#gs-8-define-backup-and-recovery-strategy","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_GS-8","name":"Azure_Security_Benchmark_v2.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-1","category":"Identity Management","title":"Standardize
-        Azure Active Directory as the central identity and authentication system","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-1-standardize-azure-active-directory-as-the-central-identity-and-authentication-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-1","name":"Azure_Security_Benchmark_v2.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure Active Directory as the central identity and authentication system","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-1-standardize-azure-active-directory-as-the-central-identity-and-authentication-system","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-1","name":"Azure_Security_Benchmark_v2.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-2","category":"Identity Management","title":"Manage
-        application identities securely and automatically","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-2-manage-application-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-2","name":"Azure_Security_Benchmark_v2.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application identities securely and automatically","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-2-manage-application-identities-securely-and-automatically","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-2","name":"Azure_Security_Benchmark_v2.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-3","category":"Identity Management","title":"Use Azure
-        AD single sign-on (SSO) for application access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-3-use-azure-ad-single-sign-on-sso-for-application-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-3","name":"Azure_Security_Benchmark_v2.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        AD single sign-on (SSO) for application access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-3-use-azure-ad-single-sign-on-sso-for-application-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-3","name":"Azure_Security_Benchmark_v2.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-4","category":"Identity Management","title":"Use strong
-        authentication controls for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-4","name":"Azure_Security_Benchmark_v2.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        authentication controls for all Azure Active Directory based access","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-4","name":"Azure_Security_Benchmark_v2.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-5","category":"Identity Management","title":"Monitor
-        and alert on account anomalies","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-5-monitor-and-alert-on-account-anomalies","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-5","name":"Azure_Security_Benchmark_v2.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and alert on account anomalies","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-5-monitor-and-alert-on-account-anomalies","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-5","name":"Azure_Security_Benchmark_v2.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-6","category":"Identity Management","title":"Restrict
-        Azure resource access based on conditions","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-6-restrict-azure-resource-access-based-on-conditions","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-6","name":"Azure_Security_Benchmark_v2.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Azure resource access based on conditions","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-6-restrict-azure-resource-access-based-on-conditions","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-6","name":"Azure_Security_Benchmark_v2.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-7","category":"Identity Management","title":"Eliminate
-        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-7-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-7","name":"Azure_Security_Benchmark_v2.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        unintended credential exposure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-7-eliminate-unintended-credential-exposure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-7","name":"Azure_Security_Benchmark_v2.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-8","category":"Identity Management","title":"Secure
-        user access to legacy applications","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-8-secure-user-access-to-legacy-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-8","name":"Azure_Security_Benchmark_v2.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        user access to legacy applications","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-identity-management#im-8-secure-user-access-to-legacy-applications","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IM-8","name":"Azure_Security_Benchmark_v2.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-1","category":"Incident Response","title":"Preparation
-        - update incident response process for Azure","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-1-preparation--update-incident-response-process-for-azure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-1","name":"Azure_Security_Benchmark_v2.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - update incident response process for Azure","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-1-preparation--update-incident-response-process-for-azure","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-1","name":"Azure_Security_Benchmark_v2.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-2","category":"Incident Response","title":"Preparation
-        - setup incident notification","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-2-preparation--setup-incident-notification","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-2","name":"Azure_Security_Benchmark_v2.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - setup incident notification","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-2-preparation--setup-incident-notification","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-2","name":"Azure_Security_Benchmark_v2.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-3","category":"Incident Response","title":"Detection
-        and analysis - create incidents based on high quality alerts","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-3-detection-and-analysis--create-incidents-based-on-high-quality-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-3","name":"Azure_Security_Benchmark_v2.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - create incidents based on high quality alerts","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-3-detection-and-analysis--create-incidents-based-on-high-quality-alerts","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-3","name":"Azure_Security_Benchmark_v2.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-4","category":"Incident Response","title":"Detection
-        and analysis - investigate an incident","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-4-detection-and-analysis--investigate-an-incident","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-4","name":"Azure_Security_Benchmark_v2.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - investigate an incident","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-4-detection-and-analysis--investigate-an-incident","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-4","name":"Azure_Security_Benchmark_v2.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-5","category":"Incident Response","title":"Detection
-        and analysis - prioritize incidents","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-5-detection-and-analysis--prioritize-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-5","name":"Azure_Security_Benchmark_v2.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - prioritize incidents","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-5-detection-and-analysis--prioritize-incidents","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-5","name":"Azure_Security_Benchmark_v2.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-6","category":"Incident Response","title":"Containment,
-        eradication and recovery - automate the incident handling","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-6-containment-eradication-and-recovery--automate-the-incident-handling","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-6","name":"Azure_Security_Benchmark_v2.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        eradication and recovery - automate the incident handling","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-incident-response#ir-6-containment-eradication-and-recovery--automate-the-incident-handling","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_IR-6","name":"Azure_Security_Benchmark_v2.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-1","category":"Logging and Threat Detection","title":"Enable
-        threat detection for Azure resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-1-enable-threat-detection-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-1","name":"Azure_Security_Benchmark_v2.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for Azure resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-1-enable-threat-detection-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-1","name":"Azure_Security_Benchmark_v2.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-2","category":"Logging and Threat Detection","title":"Enable
-        threat detection for Azure identity and access management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-2-enable-threat-detection-for-azure-identity-and-access-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-2","name":"Azure_Security_Benchmark_v2.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for Azure identity and access management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-2-enable-threat-detection-for-azure-identity-and-access-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-2","name":"Azure_Security_Benchmark_v2.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-3","category":"Logging and Threat Detection","title":"Enable
-        logging for Azure network activities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-3-enable-logging-for-azure-network-activities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-3","name":"Azure_Security_Benchmark_v2.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for Azure network activities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-3-enable-logging-for-azure-network-activities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-3","name":"Azure_Security_Benchmark_v2.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-4","category":"Logging and Threat Detection","title":"Enable
-        logging for Azure resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-4","name":"Azure_Security_Benchmark_v2.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for Azure resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-4","name":"Azure_Security_Benchmark_v2.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-5","category":"Logging and Threat Detection","title":"Centralize
-        security log management and analysis","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-5-centralize-security-log-management-and-analysis","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-5","name":"Azure_Security_Benchmark_v2.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log management and analysis","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-5-centralize-security-log-management-and-analysis","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-5","name":"Azure_Security_Benchmark_v2.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-6","category":"Logging and Threat Detection","title":"Configure
-        log storage retention","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-6-configure-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-6","name":"Azure_Security_Benchmark_v2.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log storage retention","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-6-configure-log-storage-retention","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-6","name":"Azure_Security_Benchmark_v2.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-7","category":"Logging and Threat Detection","title":"Use
-        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-7-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-7","name":"Azure_Security_Benchmark_v2.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-7-use-approved-time-synchronization-sources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_LT-7","name":"Azure_Security_Benchmark_v2.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-1","category":"Network Security","title":"Implement
-        security for internal traffic","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-1-implement-security-for-internal-traffic","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-1","name":"Azure_Security_Benchmark_v2.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security for internal traffic","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-1-implement-security-for-internal-traffic","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-1","name":"Azure_Security_Benchmark_v2.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-2","category":"Network Security","title":"Connect private
-        networks together","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-2-connect-private-networks-together","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-2","name":"Azure_Security_Benchmark_v2.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        networks together","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-2-connect-private-networks-together","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-2","name":"Azure_Security_Benchmark_v2.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-3","category":"Network Security","title":"Establish
-        private network access to Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-3-establish-private-network-access-to-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-3","name":"Azure_Security_Benchmark_v2.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        private network access to Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-3-establish-private-network-access-to-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-3","name":"Azure_Security_Benchmark_v2.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-4","category":"Network Security","title":"Protect applications
-        and services from external network attacks","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-4-protect-applications-and-services-from-external-network-attacks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-4","name":"Azure_Security_Benchmark_v2.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and services from external network attacks","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-4-protect-applications-and-services-from-external-network-attacks","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-4","name":"Azure_Security_Benchmark_v2.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-5","category":"Network Security","title":"Deploy intrusion
-        detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-5-deploy-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-5","name":"Azure_Security_Benchmark_v2.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        detection/intrusion prevention systems (IDS/IPS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-5-deploy-intrusion-detectionintrusion-prevention-systems-idsips","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-5","name":"Azure_Security_Benchmark_v2.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-6","category":"Network Security","title":"Simplify network
-        security rules","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-6-simplify-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-6","name":"Azure_Security_Benchmark_v2.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security rules","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-6-simplify-network-security-rules","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-6","name":"Azure_Security_Benchmark_v2.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-7","category":"Network Security","title":"Secure Domain
-        Name Service (DNS)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-7-secure-domain-name-service-dns","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-7","name":"Azure_Security_Benchmark_v2.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Name Service (DNS)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-network-security#ns-7-secure-domain-name-service-dns","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_NS-7","name":"Azure_Security_Benchmark_v2.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-1","category":"Privileged Access","title":"Protect and
-        limit highly privileged users","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-1-protect-and-limit-highly-privileged-users","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-1","name":"Azure_Security_Benchmark_v2.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        limit highly privileged users","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-1-protect-and-limit-highly-privileged-users","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-1","name":"Azure_Security_Benchmark_v2.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-2","category":"Privileged Access","title":"Restrict
-        administrative access to business-critical systems","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-2-restrict-administrative-access-to-business-critical-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-2","name":"Azure_Security_Benchmark_v2.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        administrative access to business-critical systems","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-2-restrict-administrative-access-to-business-critical-systems","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-2","name":"Azure_Security_Benchmark_v2.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-3","category":"Privileged Access","title":"Review and
-        reconcile user access regularly","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-3-review-and-reconcile-user-access-regularly","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-3","name":"Azure_Security_Benchmark_v2.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        reconcile user access regularly","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-3-review-and-reconcile-user-access-regularly","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-3","name":"Azure_Security_Benchmark_v2.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-4","category":"Privileged Access","title":"Set up emergency
-        access in Azure AD","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-4-set-up-emergency-access-in-azure-ad","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-4","name":"Azure_Security_Benchmark_v2.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access in Azure AD","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-4-set-up-emergency-access-in-azure-ad","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-4","name":"Azure_Security_Benchmark_v2.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-5","category":"Privileged Access","title":"Automate
-        entitlement management","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-5-automate-entitlement-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-5","name":"Azure_Security_Benchmark_v2.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        entitlement management","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-5-automate-entitlement-management","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-5","name":"Azure_Security_Benchmark_v2.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-6","category":"Privileged Access","title":"Use privileged
-        access workstations","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-6-use-privileged-access-workstations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-6","name":"Azure_Security_Benchmark_v2.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access workstations","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-6-use-privileged-access-workstations","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-6","name":"Azure_Security_Benchmark_v2.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-7","category":"Privileged Access","title":"Follow just
-        enough administration (least privilege principle)","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-7","name":"Azure_Security_Benchmark_v2.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enough administration (least privilege principle)","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-7","name":"Azure_Security_Benchmark_v2.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-8","category":"Privileged Access","title":"Choose approval
-        process for Microsoft support","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-8-choose-approval-process-for-microsoft-support","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-8","name":"Azure_Security_Benchmark_v2.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        process for Microsoft support","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-privileged-access#pa-8-choose-approval-process-for-microsoft-support","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PA-8","name":"Azure_Security_Benchmark_v2.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-1","category":"Posture and Vulnerability Management","title":"Establish
-        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-1-establish-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-1","name":"Azure_Security_Benchmark_v2.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-1-establish-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-1","name":"Azure_Security_Benchmark_v2.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-2","category":"Posture and Vulnerability Management","title":"Sustain
-        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-2-sustain-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-2","name":"Azure_Security_Benchmark_v2.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for Azure services","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-2-sustain-secure-configurations-for-azure-services","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-2","name":"Azure_Security_Benchmark_v2.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-3","category":"Posture and Vulnerability Management","title":"Establish
-        secure configurations for compute resources","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-3-establish-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-3","name":"Azure_Security_Benchmark_v2.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for compute resources","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-3-establish-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-3","name":"Azure_Security_Benchmark_v2.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-4","category":"Posture and Vulnerability Management","title":"Sustain
-        secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-4-sustain-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-4","name":"Azure_Security_Benchmark_v2.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-4-sustain-secure-configurations-for-compute-resources","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-4","name":"Azure_Security_Benchmark_v2.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-5","category":"Posture and Vulnerability Management","title":"Securely
-        store custom operating system and container images","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-5-securely-store-custom-operating-system-and-container-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-5","name":"Azure_Security_Benchmark_v2.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        store custom operating system and container images","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-5-securely-store-custom-operating-system-and-container-images","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-5","name":"Azure_Security_Benchmark_v2.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-6","category":"Posture and Vulnerability Management","title":"Perform
-        software vulnerability assessments","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-6-perform-software-vulnerability-assessments","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-6","name":"Azure_Security_Benchmark_v2.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software vulnerability assessments","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-6-perform-software-vulnerability-assessments","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-6","name":"Azure_Security_Benchmark_v2.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-7","category":"Posture and Vulnerability Management","title":"Rapidly
-        and automatically remediate software vulnerabilities","owner":"Customer","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-7-rapidly-and-automatically-remediate-software-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-7","name":"Azure_Security_Benchmark_v2.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and automatically remediate software vulnerabilities","owner":"Customer","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-7-rapidly-and-automatically-remediate-software-vulnerabilities","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-7","name":"Azure_Security_Benchmark_v2.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-8","category":"Posture and Vulnerability Management","title":"Conduct
-        regular attack simulation","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-8-conduct-regular-attack-simulation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-8","name":"Azure_Security_Benchmark_v2.0_PV-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
+        regular attack simulation","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/azure/security/benchmarks/security-controls-v2-posture-vulnerability-management#pv-8-conduct-regular-attack-simulation","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v2.0_PV-8","name":"Azure_Security_Benchmark_v2.0_PV-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
         Microsoft Azure Foundations Benchmark recommendation 1.1","category":"Identity
         and Access Management","title":"Ensure that multi-factor authentication is
         enabled for all privileged users","owner":"Customer","additionalContentUrl":"https://www.cisecurity.org/benchmark/azure/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.2.0_1.1","name":"CIS_Azure_1.2.0_1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CIS
@@ -48901,216 +48901,216 @@ interactions:
         Appendix 5.8","category":"Control Measures on Cybersecurity","title":"Control
         Measures on Cybersecurity - Appendix 5.8","owner":"Customer","additionalContentUrl":"https://www.bnm.gov.my/banking-islamic-banking","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/RMiT_v1.0_Appendix_5.8","name":"RMiT_v1.0_Appendix_5.8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-1","category":"Asset Management","title":"Track asset
-        inventory and their risks","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1","name":"Azure_Security_Benchmark_v3.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        inventory and their risks","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1","name":"Azure_Security_Benchmark_v3.0_AM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-2","category":"Asset Management","title":"Use only approved
-        services\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2","name":"Azure_Security_Benchmark_v3.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        services\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2","name":"Azure_Security_Benchmark_v3.0_AM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-3","category":"Asset Management","title":"Ensure security
-        of asset lifecycle management\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3","name":"Azure_Security_Benchmark_v3.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of asset lifecycle management\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3","name":"Azure_Security_Benchmark_v3.0_AM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-4","category":"Asset Management","title":"Limit access
-        to asset management\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4","name":"Azure_Security_Benchmark_v3.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        to asset management\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4","name":"Azure_Security_Benchmark_v3.0_AM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-5","category":"Asset Management","title":"Use only approved
-        applications in virtual machine","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5","name":"Azure_Security_Benchmark_v3.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        applications in virtual machine","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-asset-management#am-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5","name":"Azure_Security_Benchmark_v3.0_AM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-1","category":"Backup and Recovery","title":"Ensure
-        regular automated backups","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1","name":"Azure_Security_Benchmark_v3.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular automated backups","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1","name":"Azure_Security_Benchmark_v3.0_BR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-2","category":"Backup and Recovery","title":"Protect
-        backup and recovery data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2","name":"Azure_Security_Benchmark_v3.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backup and recovery data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2","name":"Azure_Security_Benchmark_v3.0_BR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-3","category":"Backup and Recovery","title":"Monitor
-        backups","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3","name":"Azure_Security_Benchmark_v3.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        backups","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3","name":"Azure_Security_Benchmark_v3.0_BR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-4","category":"Backup and Recovery","title":"Regularly
-        test backup","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4","name":"Azure_Security_Benchmark_v3.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        test backup","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-backup-recovery#br-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4","name":"Azure_Security_Benchmark_v3.0_BR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-1","category":"Data Protection","title":"Discover, classify,
-        and label sensitive data\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1","name":"Azure_Security_Benchmark_v3.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and label sensitive data\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1","name":"Azure_Security_Benchmark_v3.0_DP-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-2","category":"Data Protection","title":"Monitor anomalies
-        and threats targeting sensitive data","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2","name":"Azure_Security_Benchmark_v3.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and threats targeting sensitive data","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2","name":"Azure_Security_Benchmark_v3.0_DP-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-3","category":"Data Protection","title":"Encrypt sensitive
-        data in transit","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3","name":"Azure_Security_Benchmark_v3.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data in transit","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3","name":"Azure_Security_Benchmark_v3.0_DP-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-4","category":"Data Protection","title":"Enable data
-        at rest encryption by default","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4","name":"Azure_Security_Benchmark_v3.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        at rest encryption by default","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4","name":"Azure_Security_Benchmark_v3.0_DP-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-5","category":"Data Protection","title":"Use customer-managed
-        key option in data at rest encryption when required","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5","name":"Azure_Security_Benchmark_v3.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        key option in data at rest encryption when required","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5","name":"Azure_Security_Benchmark_v3.0_DP-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-6","category":"Data Protection","title":"Use a secure
-        key management process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6","name":"Azure_Security_Benchmark_v3.0_DP-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        key management process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6","name":"Azure_Security_Benchmark_v3.0_DP-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-7","category":"Data Protection","title":"Use a secure
-        certificate management process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7","name":"Azure_Security_Benchmark_v3.0_DP-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        certificate management process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7","name":"Azure_Security_Benchmark_v3.0_DP-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-8","category":"Data Protection","title":"Ensure security
-        of key and certificate repository ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8","name":"Azure_Security_Benchmark_v3.0_DP-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of key and certificate repository ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-data-protection#dp-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8","name":"Azure_Security_Benchmark_v3.0_DP-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-1","category":"DevOps Security","title":"Conduct threat
-        modeling\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1","name":"Azure_Security_Benchmark_v3.0_DS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        modeling\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1","name":"Azure_Security_Benchmark_v3.0_DS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-2","category":"DevOps Security","title":"Ensure software
-        supply chain security","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2","name":"Azure_Security_Benchmark_v3.0_DS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        supply chain security","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2","name":"Azure_Security_Benchmark_v3.0_DS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-3","category":"DevOps Security","title":"Secure DevOps
-        infrastructure","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3","name":"Azure_Security_Benchmark_v3.0_DS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        infrastructure","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3","name":"Azure_Security_Benchmark_v3.0_DS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-4","category":"DevOps Security","title":"Integrate static
-        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4","name":"Azure_Security_Benchmark_v3.0_DS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4","name":"Azure_Security_Benchmark_v3.0_DS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-5","category":"DevOps Security","title":"Integrate dynamic
-        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5","name":"Azure_Security_Benchmark_v3.0_DS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application security testing into DevOps pipeline","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5","name":"Azure_Security_Benchmark_v3.0_DS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-6","category":"DevOps Security","title":"Enforce security
-        of workload throughout DevOps lifecycle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6","name":"Azure_Security_Benchmark_v3.0_DS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        of workload throughout DevOps lifecycle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6","name":"Azure_Security_Benchmark_v3.0_DS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DS-7","category":"DevOps Security","title":"Enable logging
-        and monitoring in DevOps","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7","name":"Azure_Security_Benchmark_v3.0_DS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and monitoring in DevOps","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-devops-security#ds-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7","name":"Azure_Security_Benchmark_v3.0_DS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-1","category":"Endpoint Security","title":"Use Endpoint
-        Detection and Response (EDR)","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1","name":"Azure_Security_Benchmark_v3.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Detection and Response (EDR)","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1","name":"Azure_Security_Benchmark_v3.0_ES-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-2","category":"Endpoint Security","title":"Use modern
-        anti-malware software","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2","name":"Azure_Security_Benchmark_v3.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        anti-malware software","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2","name":"Azure_Security_Benchmark_v3.0_ES-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-3","category":"Endpoint Security","title":"Ensure anti-malware
-        software and signatures are updated","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3","name":"Azure_Security_Benchmark_v3.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        software and signatures are updated","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-endpoint-security#es-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3","name":"Azure_Security_Benchmark_v3.0_ES-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-1","category":"Governance and Strategy","title":"Align
-        organization roles, responsibilities, and accountabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1","name":"Azure_Security_Benchmark_v3.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        organization roles, responsibilities, and accountabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1","name":"Azure_Security_Benchmark_v3.0_GS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-10","category":"Governance and Strategy","title":"Define
-        and implement DevOps security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10","name":"Azure_Security_Benchmark_v3.0_GS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement DevOps security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10","name":"Azure_Security_Benchmark_v3.0_GS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-2","category":"Governance and Strategy","title":"Define
-        and implement enterprise segmentation/separation of duties strategy ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2","name":"Azure_Security_Benchmark_v3.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement enterprise segmentation/separation of duties strategy ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2","name":"Azure_Security_Benchmark_v3.0_GS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-3","category":"Governance and Strategy","title":"Define
-        and implement data protection strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3","name":"Azure_Security_Benchmark_v3.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement data protection strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3","name":"Azure_Security_Benchmark_v3.0_GS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-4","category":"Governance and Strategy","title":"Define
-        and implement network security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4","name":"Azure_Security_Benchmark_v3.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement network security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4","name":"Azure_Security_Benchmark_v3.0_GS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-5","category":"Governance and Strategy","title":"Define
-        and implement security posture management strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5","name":"Azure_Security_Benchmark_v3.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement security posture management strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5","name":"Azure_Security_Benchmark_v3.0_GS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-6","category":"Governance and Strategy","title":"Define
-        and implement identity and privileged access strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6","name":"Azure_Security_Benchmark_v3.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement identity and privileged access strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6","name":"Azure_Security_Benchmark_v3.0_GS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-7","category":"Governance and Strategy","title":"Define
-        and implement logging, threat detection and incident response strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7","name":"Azure_Security_Benchmark_v3.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement logging, threat detection and incident response strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7","name":"Azure_Security_Benchmark_v3.0_GS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-8","category":"Governance and Strategy","title":"Define
-        and implement backup and recovery strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8","name":"Azure_Security_Benchmark_v3.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement backup and recovery strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8","name":"Azure_Security_Benchmark_v3.0_GS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark GS-9","category":"Governance and Strategy","title":"Define
-        and implement endpoint security strategy","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9","name":"Azure_Security_Benchmark_v3.0_GS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and implement endpoint security strategy","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-governance-strategy#gs-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9","name":"Azure_Security_Benchmark_v3.0_GS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-1","category":"Identity Management","title":"Use centralized
-        identity and authentication system","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1","name":"Azure_Security_Benchmark_v3.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and authentication system","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1","name":"Azure_Security_Benchmark_v3.0_IM-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-2","category":"Identity Management","title":"Protect
-        identity and authentication system","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2","name":"Azure_Security_Benchmark_v3.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        identity and authentication system","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2","name":"Azure_Security_Benchmark_v3.0_IM-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-3","category":"Identity Management","title":"Manage
-        application identities securely and automatically","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3","name":"Azure_Security_Benchmark_v3.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application identities securely and automatically","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3","name":"Azure_Security_Benchmark_v3.0_IM-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-4","category":"Identity Management","title":"Authenticate
-        server and services","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4","name":"Azure_Security_Benchmark_v3.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        server and services","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4","name":"Azure_Security_Benchmark_v3.0_IM-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-5","category":"Identity Management","title":"Use single
-        sign-on (SSO) for application access","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5","name":"Azure_Security_Benchmark_v3.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        sign-on (SSO) for application access","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5","name":"Azure_Security_Benchmark_v3.0_IM-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-6","category":"Identity Management","title":"Use strong
-        authentication controls","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6","name":"Azure_Security_Benchmark_v3.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        authentication controls","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6","name":"Azure_Security_Benchmark_v3.0_IM-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-7","category":"Identity Management","title":"Restrict
-        resource access based on conditions","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7","name":"Azure_Security_Benchmark_v3.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        resource access based on conditions","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7","name":"Azure_Security_Benchmark_v3.0_IM-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-8","category":"Identity Management","title":"Restrict
-        the exposure of credential and secrets","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8","name":"Azure_Security_Benchmark_v3.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        the exposure of credential and secrets","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8","name":"Azure_Security_Benchmark_v3.0_IM-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-9","category":"Identity Management","title":"Secure
-        user access to existing applications","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9","name":"Azure_Security_Benchmark_v3.0_IM-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        user access to existing applications","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-identity-management#im-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9","name":"Azure_Security_Benchmark_v3.0_IM-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-1","category":"Incident Response","title":"Preparation
-        - update incident response plan and handling process","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1","name":"Azure_Security_Benchmark_v3.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - update incident response plan and handling process","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1","name":"Azure_Security_Benchmark_v3.0_IR-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-2","category":"Incident Response","title":"Preparation
-        - setup incident notification","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2","name":"Azure_Security_Benchmark_v3.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        - setup incident notification","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2","name":"Azure_Security_Benchmark_v3.0_IR-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-3","category":"Incident Response","title":"Detection
-        and analysis - create incidents based on high-quality alerts","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3","name":"Azure_Security_Benchmark_v3.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - create incidents based on high-quality alerts","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3","name":"Azure_Security_Benchmark_v3.0_IR-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-4","category":"Incident Response","title":"Detection
-        and analysis - investigate an incident","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4","name":"Azure_Security_Benchmark_v3.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - investigate an incident","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4","name":"Azure_Security_Benchmark_v3.0_IR-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-5","category":"Incident Response","title":"Detection
-        and analysis - prioritize incidents","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5","name":"Azure_Security_Benchmark_v3.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and analysis - prioritize incidents","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5","name":"Azure_Security_Benchmark_v3.0_IR-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-6","category":"Incident Response","title":"Containment,
-        eradication and recovery - automate the incident handling","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6","name":"Azure_Security_Benchmark_v3.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        eradication and recovery - automate the incident handling","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6","name":"Azure_Security_Benchmark_v3.0_IR-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IR-7","category":"Incident Response","title":"Post-incident
-        activity - conduct lesson learned and retain evidence","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7","name":"Azure_Security_Benchmark_v3.0_IR-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        activity - conduct lesson learned and retain evidence","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-incident-response#ir-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7","name":"Azure_Security_Benchmark_v3.0_IR-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-1","category":"Logging and Threat Detection","title":"Enable
-        threat detection capabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1","name":"Azure_Security_Benchmark_v3.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection capabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1","name":"Azure_Security_Benchmark_v3.0_LT-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-2","category":"Logging and Threat Detection","title":"Enable
-        threat detection for identity and access management","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2","name":"Azure_Security_Benchmark_v3.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        threat detection for identity and access management","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2","name":"Azure_Security_Benchmark_v3.0_LT-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-3","category":"Logging and Threat Detection","title":"Enable
-        logging for security investigation","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3","name":"Azure_Security_Benchmark_v3.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logging for security investigation","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3","name":"Azure_Security_Benchmark_v3.0_LT-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-4","category":"Logging and Threat Detection","title":"Enable
-        network logging for security investigation\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4","name":"Azure_Security_Benchmark_v3.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network logging for security investigation\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4","name":"Azure_Security_Benchmark_v3.0_LT-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-5","category":"Logging and Threat Detection","title":"Centralize
-        security log management and analysis","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5","name":"Azure_Security_Benchmark_v3.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security log management and analysis","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5","name":"Azure_Security_Benchmark_v3.0_LT-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-6","category":"Logging and Threat Detection","title":"Configure
-        log storage retention","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6","name":"Azure_Security_Benchmark_v3.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        log storage retention","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6","name":"Azure_Security_Benchmark_v3.0_LT-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-7","category":"Logging and Threat Detection","title":"Use
-        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7","name":"Azure_Security_Benchmark_v3.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        approved time synchronization sources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7","name":"Azure_Security_Benchmark_v3.0_LT-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-1","category":"Network Security","title":"Establish
-        network segmentation boundaries ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1","name":"Azure_Security_Benchmark_v3.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        network segmentation boundaries ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1","name":"Azure_Security_Benchmark_v3.0_NS-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-10","category":"Network Security","title":"Ensure Domain
-        Name System (DNS) security","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10","name":"Azure_Security_Benchmark_v3.0_NS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Name System (DNS) security","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-10","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10","name":"Azure_Security_Benchmark_v3.0_NS-10","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-2","category":"Network Security","title":"Secure cloud
-        services with network controls","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2","name":"Azure_Security_Benchmark_v3.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        services with network controls","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2","name":"Azure_Security_Benchmark_v3.0_NS-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-3","category":"Network Security","title":"Deploy firewall
-        at the edge of enterprise network","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3","name":"Azure_Security_Benchmark_v3.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        at the edge of enterprise network","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3","name":"Azure_Security_Benchmark_v3.0_NS-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-4","category":"Network Security","title":"Deploy intrusion
-        detection/intrusion prevention systems (IDS/IPS)","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4","name":"Azure_Security_Benchmark_v3.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        detection/intrusion prevention systems (IDS/IPS)","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4","name":"Azure_Security_Benchmark_v3.0_NS-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-5","category":"Network Security","title":"Deploy DDOS
-        protection","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5","name":"Azure_Security_Benchmark_v3.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        protection","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5","name":"Azure_Security_Benchmark_v3.0_NS-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-6","category":"Network Security","title":"Deploy web
-        application firewall","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6","name":"Azure_Security_Benchmark_v3.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        application firewall","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6","name":"Azure_Security_Benchmark_v3.0_NS-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-7","category":"Network Security","title":"Simplify network
-        security configuration","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7","name":"Azure_Security_Benchmark_v3.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        security configuration","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7","name":"Azure_Security_Benchmark_v3.0_NS-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-8","category":"Network Security","title":"Detect and
-        disable insecure services and protocols","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8","name":"Azure_Security_Benchmark_v3.0_NS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        disable insecure services and protocols","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8","name":"Azure_Security_Benchmark_v3.0_NS-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-9","category":"Network Security","title":"Connect on-premises
-        or cloud network privately \n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9","name":"Azure_Security_Benchmark_v3.0_NS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        or cloud network privately \n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-network-security#ns-9","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9","name":"Azure_Security_Benchmark_v3.0_NS-9","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-1","category":"Privileged Access","title":"Separate
-        and limit highly privileged/administrative users","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1","name":"Azure_Security_Benchmark_v3.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and limit highly privileged/administrative users","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1","name":"Azure_Security_Benchmark_v3.0_PA-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-2","category":"Privileged Access","title":"Avoid standing
-        access for accounts and permissions","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2","name":"Azure_Security_Benchmark_v3.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access for accounts and permissions","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2","name":"Azure_Security_Benchmark_v3.0_PA-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-3","category":"Privileged Access","title":"Manage identity
-        and access lifecycle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3","name":"Azure_Security_Benchmark_v3.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and access lifecycle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3","name":"Azure_Security_Benchmark_v3.0_PA-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-4","category":"Privileged Access","title":"Review and
-        reconcile user access regularly","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4","name":"Azure_Security_Benchmark_v3.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        reconcile user access regularly","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4","name":"Azure_Security_Benchmark_v3.0_PA-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-5","category":"Privileged Access","title":"Set up emergency
-        access","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5","name":"Azure_Security_Benchmark_v3.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5","name":"Azure_Security_Benchmark_v3.0_PA-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-6","category":"Privileged Access","title":"Use privileged
-        access workstations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6","name":"Azure_Security_Benchmark_v3.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access workstations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6","name":"Azure_Security_Benchmark_v3.0_PA-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-7","category":"Privileged Access","title":"Follow just
-        enough administration (least privilege) principle","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7","name":"Azure_Security_Benchmark_v3.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        enough administration (least privilege) principle","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7","name":"Azure_Security_Benchmark_v3.0_PA-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-8","category":"Privileged Access","title":"Choose approval
-        process for third-party support\n\n","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8","name":"Azure_Security_Benchmark_v3.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        process for third-party support\n\n","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-privileged-access#pa-8","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8","name":"Azure_Security_Benchmark_v3.0_PA-8","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-1","category":"Posture and Vulnerability Management","title":"Define
-        and establish secure configurations ","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1","name":"Azure_Security_Benchmark_v3.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and establish secure configurations ","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-1","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1","name":"Azure_Security_Benchmark_v3.0_PV-1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-2","category":"Posture and Vulnerability Management","title":"Audit
-        and enforce secure configurations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2","name":"Azure_Security_Benchmark_v3.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and enforce secure configurations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-2","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2","name":"Azure_Security_Benchmark_v3.0_PV-2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-3","category":"Posture and Vulnerability Management","title":"Define
-        and establish secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3","name":"Azure_Security_Benchmark_v3.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and establish secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-3","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3","name":"Azure_Security_Benchmark_v3.0_PV-3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-4","category":"Posture and Vulnerability Management","title":"Audit
-        and enforce secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4","name":"Azure_Security_Benchmark_v3.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and enforce secure configurations for compute resources","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-4","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4","name":"Azure_Security_Benchmark_v3.0_PV-4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-5","category":"Posture and Vulnerability Management","title":"Perform
-        vulnerability assessments","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5","name":"Azure_Security_Benchmark_v3.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        vulnerability assessments","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-5","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5","name":"Azure_Security_Benchmark_v3.0_PV-5","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-6","category":"Posture and Vulnerability Management","title":"Rapidly
-        and automatically remediate vulnerabilities","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6","name":"Azure_Security_Benchmark_v3.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        and automatically remediate vulnerabilities","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-6","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6","name":"Azure_Security_Benchmark_v3.0_PV-6","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-7","category":"Posture and Vulnerability Management","title":"Conduct
-        regular red team operations","owner":"Shared","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7","name":"Azure_Security_Benchmark_v3.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        regular red team operations","owner":"Shared","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/security-controls-v3-posture-vulnerability-management#pv-7","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7","name":"Azure_Security_Benchmark_v3.0_PV-7","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark AM-P1","category":"Asset Management","title":"All resources
-        deployed within your tenant are trackable via Azure Resource Graph","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_AM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_AM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        deployed within your tenant are trackable via Azure Resource Graph","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_AM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_AM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-P1","category":"Backup & Recovery","title":"Service
-        is recoverable from accidental/malicious data loss and data corruption","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        is recoverable from accidental/malicious data loss and data corruption","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark BR-P2","category":"Backup & Recovery","title":"Services
         should automatically back up customer data managed by the service and/or allow
-        customers to configure backup for their data","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        customers to configure backup for their data","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_BR-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_BR-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P1","category":"Data Protection","title":"All sensitive
-        data is classified and labeled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        data is classified and labeled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P2","category":"Data Protection","title":"Alerts will
-        be generated for anomalous data transfer for all services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        be generated for anomalous data transfer for all services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P3","category":"Data Protection","title":"All data is
-        encrypted in transit with strong protocols","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        encrypted in transit with strong protocols","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark DP-P4","category":"Data Protection","title":"All data is
-        encrypted at rest","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        encrypted at rest","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_DP-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_DP-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark ES-P1","category":"Endpoint Security","title":"Anti-malware
-        solution is deployed & up-to-date on all endpoints","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_ES-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_ES-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        solution is deployed & up-to-date on all endpoints","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_ES-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_ES-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark IM-P1","category":"Identity Management","title":"All service-to-service
-        & user authentication uses Azure Active Directory","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_IM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_IM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        & user authentication uses Azure Active Directory","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_IM-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_IM-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P1","category":"Logging & Threat Detection","title":"Azure
-        resources have threat detection enabled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        resources have threat detection enabled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P2","category":"Logging & Threat Detection","title":"Network
-        logs are collected for all Azure services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logs are collected for all Azure services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark LT-P3","category":"Logging & Threat Detection","title":"Security
-        logs are collected for all services","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        logs are collected for all services","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_LT-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_LT-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P1","category":"Network Security","title":"Network firewalls
-        are enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        are enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P2","category":"Network Security","title":"Public network
-        access is disabled","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access is disabled","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P3","category":"Network Security","title":"DDoS protection
-        is enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        is enabled for all workloads in a VNET","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P3","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P3","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark NS-P4","category":"Network Security","title":"Web Application
-        Firewall is enabled for all web workloads in a VNET or edge network locations","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        Firewall is enabled for all web workloads in a VNET or edge network locations","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_NS-P4","name":"Azure_Security_Benchmark_Enforce_v1.0_NS-P4","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-P1","category":"Privileged Access","title":"No persistent
-        access exists","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access exists","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PA-P2","category":"Privileged Access","title":"Excessive
-        access is detected and removed","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        access is detected and removed","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PA-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PA-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-P1","category":"Posture & Vulnerability Management","title":"Continuous
-        monitoring is enabled by Azure Security Center","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
+        monitoring is enabled by Azure Security Center","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P1","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"Azure
         Security Benchmark PV-P2","category":"Posture & Vulnerability Management","title":"Only
-        secure images for compute resources can be used","owner":"","additionalContentUrl":"https://docs.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
+        secure images for compute resources can be used","owner":"","additionalContentUrl":"https://learn.microsoft.com/security/benchmark/azure/introduction","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_Enforce_v1.0_PV-P2","name":"Azure_Security_Benchmark_Enforce_v1.0_PV-P2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
         2.0 AC.L1-3.1.1","category":"Access Control","title":"Authorized Access Control","owner":"","additionalContentUrl":"https://www.acq.osd.mil/cmmc/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_AC.L1-3.1.1","name":"CMMC_2.0_AC.L1-3.1.1","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
         2.0 AC.L1-3.1.2","category":"Access Control","title":"Transaction & Function
         Control","owner":"","additionalContentUrl":"https://www.acq.osd.mil/cmmc/","metadata":{}},"id":"/providers/Microsoft.PolicyInsights/policyMetadata/CMMC_2.0_AC.L1-3.1.2","name":"CMMC_2.0_AC.L1-3.1.2","type":"Microsoft.PolicyInsights/policyMetadata"},{"properties":{"metadataId":"CMMC
diff --git a/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/test_policyinsights_scenario.py b/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/test_policyinsights_scenario.py
index 2bbcedaa500..5a3b4da9a89 100644
--- a/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/test_policyinsights_scenario.py
+++ b/src/azure-cli/azure/cli/command_modules/policyinsights/tests/latest/test_policyinsights_scenario.py
@@ -383,7 +383,7 @@ def test_policy_insights_remediation_management_group(self):
     #    2. Create 2 storage accounts in two different regions in above RG
     #    3. At above RG scope, create a new policy assignment for built-in definition with name '361c2074-3595-4e5d-8cab-4f21dffc835c' and display name 'Deploy Advanced Threat Protection on storage accounts'
     #    4. Update the 'pan' key value in test code below with the assignment name created above
-    #    5. Trigger an on-demand evaluation scan on above RG by calling triggerEvaluation API. Check https://docs.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data#on-demand-evaluation-scan
+    #    5. Trigger an on-demand evaluation scan on above RG by calling triggerEvaluation API. Check https://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data#on-demand-evaluation-scan
     #    6. After step 5 completes, you should see the two storage accounts listed as non-compliant resources for the above assignment
     #    7. Now run the testcase in live mode using command 'azdev test test_policy_insights_remediation_complete --live'
     @record_only()
diff --git a/src/azure-cli/azure/cli/command_modules/profile/tests/latest/test_auth_e2e.py b/src/azure-cli/azure/cli/command_modules/profile/tests/latest/test_auth_e2e.py
index 8d39c21ba4b..766afa10692 100644
--- a/src/azure-cli/azure/cli/command_modules/profile/tests/latest/test_auth_e2e.py
+++ b/src/azure-cli/azure/cli/command_modules/profile/tests/latest/test_auth_e2e.py
@@ -29,7 +29,7 @@ def test_conditional_access_mfa(self):
 
         The result ATs are checked per
           Microsoft identity platform access tokens
-          https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens
+          https://learn.microsoft.com/en-us/azure/active-directory/develop/access-tokens
 
         Following claims are checked:
           - aud (Audience): https://tools.ietf.org/html/rfc7519#section-4.1.3
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/_helptext_pg.py b/src/azure-cli/azure/cli/command_modules/rdbms/_helptext_pg.py
index f16b0287efc..8d78e4e0b18 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/_helptext_pg.py
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/_helptext_pg.py
@@ -22,11 +22,11 @@
 
     - Configure public access
 
-    https://docs.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-manage-firewall-cli
+    https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-manage-firewall-cli
 
     - Configure private access
 
-    https://docs.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-manage-virtual-network-cli
+    https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-manage-virtual-network-cli
 
 examples:
   - name: >
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/_params.py b/src/azure-cli/azure/cli/command_modules/rdbms/_params.py
index e48a39c2c9d..360a220979f 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/_params.py
@@ -94,7 +94,7 @@ def _complex_params(command_group):  # pylint: disable=too-many-statements
             c.argument('location', arg_type=get_location_type(self.cli_ctx))
             if command_group == 'postgres':
                 c.argument('version', default='11',
-                           help='Server major version. https://docs.microsoft.com/en-us/azure/postgresql/single-server/concepts-supported-versions')
+                           help='Server major version. https://learn.microsoft.com/en-us/azure/postgresql/single-server/concepts-supported-versions')
             else:
                 c.argument('version', help='Server major version.')
 
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/_create.py b/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/_create.py
index 0c4e92e8305..4afa12a6972 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/_create.py
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/_create.py
@@ -14,7 +14,7 @@
 class Create(AAZCommand):
     """Create a virtual network.
 
-    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://docs.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
+    You may also create a subnet at the same time by specifying a subnet name and (optionally) an address prefix. To learn about how to create a virtual network visit https://learn.microsoft.com/azure/virtual-network/manage-virtual-network#create-a-virtual-network.
 
     :example: Create a virtual network with a specific address prefix and one subnet.
         az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name MySubnet --subnet-prefixes 10.0.0.0/24
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_mysql_proxy_resources_mgmt.yaml b/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_mysql_proxy_resources_mgmt.yaml
index 9178e9cb4eb..2446d8cdeb9 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_mysql_proxy_resources_mgmt.yaml
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_mysql_proxy_resources_mgmt.yaml
@@ -4002,7 +4002,7 @@ interactions:
         and can be used to control the operation of AUTO_INCREMENT columns.","defaultValue":"1","dataType":"Integer","allowedValues":"1-65535","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/servers/azuredbclitest000002/configurations/auto_increment_increment","name":"auto_increment_increment","type":"Microsoft.DBforMySQL/servers/configurations"},{"properties":{"value":"1","description":"The
         auto_increment_offset is intended for use with source-to-source replication,
         and can be used to control the operation of AUTO_INCREMENT columns.","defaultValue":"1","dataType":"Integer","allowedValues":"1-65535","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/servers/azuredbclitest000002/configurations/auto_increment_offset","name":"auto_increment_offset","type":"Microsoft.DBforMySQL/servers/configurations"},{"properties":{"value":"0","description":"Number
-        of seconds to service waits before the binary log file gets purged. See: https://docs.microsoft.com/en-us/azure/mysql/flexible-server/concepts-server-parameters#binlog_expire_logs_seconds","defaultValue":"0","dataType":"Integer","allowedValues":"0-4294967295","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/servers/azuredbclitest000002/configurations/binlog_expire_logs_seconds","name":"binlog_expire_logs_seconds","type":"Microsoft.DBforMySQL/servers/configurations"},{"properties":{"value":"0","description":"Controls
+        of seconds to service waits before the binary log file gets purged. See: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-server-parameters#binlog_expire_logs_seconds","defaultValue":"0","dataType":"Integer","allowedValues":"0-4294967295","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/servers/azuredbclitest000002/configurations/binlog_expire_logs_seconds","name":"binlog_expire_logs_seconds","type":"Microsoft.DBforMySQL/servers/configurations"},{"properties":{"value":"0","description":"Controls
         how many microseconds the binary log commit waits before synchronizing the
         binary log file to disk.","defaultValue":"0","dataType":"Integer","allowedValues":"0,11-1000000","source":"system-default","isConfigPendingRestart":"False","isDynamicConfig":"True"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforMySQL/servers/azuredbclitest000002/configurations/binlog_group_commit_sync_delay","name":"binlog_group_commit_sync_delay","type":"Microsoft.DBforMySQL/servers/configurations"},{"properties":{"value":"0","description":"The
         maximum number of transactions to wait for before aborting the current delay
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_flexible_server_proxy_resource.yaml b/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_flexible_server_proxy_resource.yaml
index 008c6bca550..6cb3a64649f 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_flexible_server_proxy_resource.yaml
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_flexible_server_proxy_resource.yaml
@@ -2580,7 +2580,7 @@ interactions:
         the maximum memory to be used by each autovacuum worker process.","defaultValue":"-1","dataType":"Integer","allowedValues":"-1-2097151","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"unit":"KB","documentationLink":"https://www.postgresql.org/docs/13/runtime-config-resource.html"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/autovacuum_work_mem","name":"autovacuum_work_mem","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"md5","description":"Accepted
         password authentication method","defaultValue":"md5","dataType":"Set","allowedValues":"md5,scram-sha-256","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/azure.accepted_password_auth_method","name":"azure.accepted_password_auth_method","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"on","description":"Create
         temp tablespace on ephemeral disk","defaultValue":"on","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/azure.enable_temp_tablespaces_on_local_ssd","name":"azure.enable_temp_tablespaces_on_local_ssd","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"","description":"Specifies
-        which extensions are allowed to be created in the server.","defaultValue":"","dataType":"Set","allowedValues":",address_standardizer,address_standardizer_data_us,amcheck,anon,azure_ai,azure_storage,bloom,btree_gin,btree_gist,citext,cube,dblink,dict_int,dict_xsyn,earthdistance,fuzzystrmatch,hstore,hypopg,intagg,intarray,isn,lo,login_hook,ltree,orafce,pageinspect,pg_buffercache,pg_cron,pg_freespacemap,pg_hint_plan,pg_partman,pg_prewarm,pg_repack,pg_squeeze,pg_stat_statements,pg_trgm,pg_visibility,pgaudit,pgcrypto,pglogical,pgrouting,pgrowlocks,pgstattuple,plpgsql,plv8,postgis,postgis_raster,postgis_sfcgal,postgis_tiger_geocoder,postgis_topology,postgres_fdw,semver,session_variable,sslinfo,tablefunc,tds_fdw,timescaledb,tsm_system_rows,tsm_system_time,unaccent,uuid-ossp,vector","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://docs.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-extensions#postgres-13-extensions"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/azure.extensions","name":"azure.extensions","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Specifies
+        which extensions are allowed to be created in the server.","defaultValue":"","dataType":"Set","allowedValues":",address_standardizer,address_standardizer_data_us,amcheck,anon,azure_ai,azure_storage,bloom,btree_gin,btree_gist,citext,cube,dblink,dict_int,dict_xsyn,earthdistance,fuzzystrmatch,hstore,hypopg,intagg,intarray,isn,lo,login_hook,ltree,orafce,pageinspect,pg_buffercache,pg_cron,pg_freespacemap,pg_hint_plan,pg_partman,pg_prewarm,pg_repack,pg_squeeze,pg_stat_statements,pg_trgm,pg_visibility,pgaudit,pgcrypto,pglogical,pgrouting,pgrowlocks,pgstattuple,plpgsql,plv8,postgis,postgis_raster,postgis_sfcgal,postgis_tiger_geocoder,postgis_topology,postgres_fdw,semver,session_variable,sslinfo,tablefunc,tds_fdw,timescaledb,tsm_system_rows,tsm_system_time,unaccent,uuid-ossp,vector","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-extensions#postgres-13-extensions"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/azure.extensions","name":"azure.extensions","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Specifies
         if this is a server created for migrating from Azure Database for PostgreSQL
         Single Server to Flexible Server","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/azure.single_to_flex_migration","name":"azure.single_to_flex_migration","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"on","description":"Allow
         accessing data from blob storage in extension azure_storage.","defaultValue":"on","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/azure_storage.allow_network_access","name":"azure_storage.allow_network_access","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"256","description":"Blob
@@ -3026,8 +3026,8 @@ interactions:
         the retention period window in days for server logs - after this time data
         will be deleted.","defaultValue":"3","dataType":"Integer","allowedValues":"1-7","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/logfiles.retention_days","name":"logfiles.retention_days","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Enables
         or disables server logs functionality.","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/logfiles.download_enable","name":"logfiles.download_enable","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Enables
-        intelligent tuning","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://docs.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-intelligent-tuning"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/intelligent_tuning","name":"intelligent_tuning","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"none","description":"Specifies
-        which metrics will be adjusted by intelligent tuning.","defaultValue":"none","dataType":"Set","allowedValues":"none,Storage-checkpoint_completion_target,Storage-min_wal_size,Storage-max_wal_size,Storage-bgwriter_delay,tuning-autovacuum,all","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://docs.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-intelligent-tuning"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/intelligent_tuning.metric_targets","name":"intelligent_tuning.metric_targets","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Enables
+        intelligent tuning","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-intelligent-tuning"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/intelligent_tuning","name":"intelligent_tuning","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"none","description":"Specifies
+        which metrics will be adjusted by intelligent tuning.","defaultValue":"none","dataType":"Set","allowedValues":"none,Storage-checkpoint_completion_target,Storage-min_wal_size,Storage-max_wal_size,Storage-bgwriter_delay,tuning-autovacuum,all","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-intelligent-tuning"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/intelligent_tuning.metric_targets","name":"intelligent_tuning.metric_targets","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Enables
         metrics collection for all table statistics within a database","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://learn.microsoft.com/azure/postgresql/flexible-server/concepts-monitoring"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/metrics.autovacuum_diagnostics","name":"metrics.autovacuum_diagnostics","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Enables
         metrics collection for database and activity statistics","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://learn.microsoft.com/azure/postgresql/flexible-server/concepts-monitoring"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/metrics.collector_database_activity","name":"metrics.collector_database_activity","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"off","description":"Enables
         metrics collection for PgBouncer.","defaultValue":"off","dataType":"Boolean","allowedValues":"on,off","source":"system-default","isDynamicConfig":true,"isReadOnly":false,"isConfigPendingRestart":false,"documentationLink":"https://learn.microsoft.com/azure/postgresql/flexible-server/concepts-monitoring"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-000002/configurations/metrics.pgbouncer_diagnostics","name":"metrics.pgbouncer_diagnostics","type":"Microsoft.DBforPostgreSQL/flexibleServers/configurations"},{"properties":{"value":"false","description":"Denotes
diff --git a/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_proxy_resources_mgmt.yaml b/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_proxy_resources_mgmt.yaml
index 820052995d5..aabc240b026 100644
--- a/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_proxy_resources_mgmt.yaml
+++ b/src/azure-cli/azure/cli/command_modules/rdbms/tests/latest/recordings/test_postgres_proxy_resources_mgmt.yaml
@@ -4152,7 +4152,7 @@ interactions:
         the level of replication support (Read Replicas). Any change requires restarting
         the server to take effect.","defaultValue":"OFF","dataType":"Enumeration","allowedValues":"OFF,REPLICA,LOGICAL","source":"user-override","isConfigPendingRestart":"False","isDynamicConfig":"False"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.DBforPostgreSQL/servers/azuredbclitest000002/configurations/azure.replication_support","name":"azure.replication_support","type":"Microsoft.DBforPostgreSQL/servers/configurations"},{"properties":{"value":"10","description":"IMPORTANT
         NOTE: In PG 11 and lower, the value max_wal_senders MUST be much smaller relative
-        to max_connections since it takes up the connection slots. See https://docs.microsoft.com/en-us/azure/postgresql/single-server/concepts-limits
+        to max_connections since it takes up the connection slots. See https://learn.microsoft.com/en-us/azure/postgresql/single-server/concepts-limits
         for max_connections info in single server. Typically a single digit value
         suffices for most scenarios. Only in scenarios like migration where there
         is a need to migrate 10''s of databases at once should you set this to a higher
diff --git a/src/azure-cli/azure/cli/command_modules/resource/_bicep.py b/src/azure-cli/azure/cli/command_modules/resource/_bicep.py
index 4e71b978a25..e2ec9f50b82 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/_bicep.py
+++ b/src/azure-cli/azure/cli/command_modules/resource/_bicep.py
@@ -33,7 +33,7 @@
 # See: https://semver.org/#is-there-a-suggested-regular-expression-regex-to-check-a-semver-string
 _semver_pattern = r"(?P<major>0|[1-9]\d*)\.(?P<minor>0|[1-9]\d*)\.(?P<patch>0|[1-9]\d*)(?:-(?P<prerelease>(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+(?P<buildmetadata>[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?"  # pylint: disable=line-too-long
 
-# See: https://docs.microsoft.com/azure/azure-resource-manager/templates/template-syntax#template-format
+# See: https://learn.microsoft.com/azure/azure-resource-manager/templates/template-syntax#template-format
 _template_schema_pattern = r"https?://schema\.management\.azure\.com/schemas/[0-9a-zA-Z-]+/(?P<templateType>[a-zA-Z]+)Template\.json#?"  # pylint: disable=line-too-long
 
 _bicep_diagnostic_warning_pattern = r"^([^\s].*)\((\d+)(?:,\d+|,\d+,\d+)?\)\s+:\s+(Warning)\s+([a-zA-Z-\d]+):\s*(.*?)\s+\[(.*?)\]$"  # pylint: disable=line-too-long
diff --git a/src/azure-cli/azure/cli/command_modules/resource/_help.py b/src/azure-cli/azure/cli/command_modules/resource/_help.py
index 5dd6da6db45..b7cb531a895 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/resource/_help.py
@@ -2237,9 +2237,9 @@
 type: command
 short-summary: Invoke an action on the resource.
 long-summary: >
-    A list of possible actions corresponding to a resource can be found at https://docs.microsoft.com/rest/api/. All POST requests are actions that can be invoked and are specified at the end of the URI path. For instance, to stop a VM, the
+    A list of possible actions corresponding to a resource can be found at https://learn.microsoft.com/rest/api/. All POST requests are actions that can be invoked and are specified at the end of the URI path. For instance, to stop a VM, the
     request URI is https://management.azure.com/subscriptions/{SubscriptionId}/resourceGroups/{ResourceGroup}/providers/Microsoft.Compute/virtualMachines/{VM}/powerOff?api-version={APIVersion} and the corresponding action is `powerOff`. This can
-    be found at https://docs.microsoft.com/rest/api/compute/virtualmachines/virtualmachines-stop.
+    be found at https://learn.microsoft.com/rest/api/compute/virtualmachines/virtualmachines-stop.
 examples:
   - name: Power-off a vm, specified by Id.
     text: >
diff --git a/src/azure-cli/azure/cli/command_modules/resource/_params.py b/src/azure-cli/azure/cli/command_modules/resource/_params.py
index 0755eec520f..a83eaae68f6 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/resource/_params.py
@@ -60,7 +60,7 @@ def load_arguments(self, _):
     deployment_parameters_type = CLIArgumentType(options_list=['--parameters', '-p'], action='append', nargs='+', completer=FilesCompleter(), help='the deployment parameters')
     filter_type = CLIArgumentType(options_list=['--filter'], is_preview=True,
                                   help='Filter expression using OData notation. You can use --filter "provisioningState eq \'{state}\'" to filter provisioningState. '
-                                       'To get more information, please visit https://docs.microsoft.com/rest/api/resources/deployments/listatsubscriptionscope#uri-parameters')
+                                       'To get more information, please visit https://learn.microsoft.com/rest/api/resources/deployments/listatsubscriptionscope#uri-parameters')
     no_prompt = CLIArgumentType(arg_type=get_three_state_flag(), help='The option to disable the prompt of missing parameters for ARM template. '
                                 'When the value is true, the prompt requiring users to provide missing parameter will be ignored. The default value is false.')
 
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml
index ff18444a74e..6dd617acb1c 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml
@@ -211,7 +211,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -485,7 +485,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -671,7 +671,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -795,7 +795,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -958,7 +958,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -1312,7 +1312,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -1412,7 +1412,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -1442,7 +1442,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -1536,7 +1536,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -2465,7 +2465,7 @@ interactions:
         RPC) clients\",\"description\":\"Specifies which behaviors are allowed by
         clients for applications using the NTLM Security Support Provider (SSP). The
         SSP Interface (SSPI) is used by applications that need authentication services.
-        See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) servers\",\"description\":\"Specifies which behaviors are allowed by
@@ -2653,7 +2653,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -2905,7 +2905,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -3150,7 +3150,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -3282,7 +3282,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3496,7 +3496,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3580,7 +3580,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -3627,7 +3627,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -3788,7 +3788,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -4040,7 +4040,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities
         in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container
@@ -4222,7 +4222,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service
@@ -4302,7 +4302,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
         Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include
         Arc connected servers\",\"description\":\"By selecting this option, you agree
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -5021,7 +5021,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -5058,7 +5058,7 @@ interactions:
         the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         IDs\",\"description\":\"For all recommendations, leave empty. For specific
         recommendations, enter a list of recommendation IDs separated by semicolons
-        (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        (';'). Recommendation IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Determines recommendation severities. Example:
         High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
@@ -5129,7 +5129,7 @@ interactions:
         network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -5238,7 +5238,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -5257,7 +5257,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -5278,7 +5278,7 @@ interactions:
         Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -5392,7 +5392,7 @@ interactions:
         Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6034,7 +6034,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -6227,7 +6227,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This
@@ -6295,7 +6295,7 @@ interactions:
         Defender's extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all control
         plane (master) nodes in the cluster and sends it to the Azure Defender for
-        Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
+        Kubernetes backend in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
         Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in 'System Audit
         Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This
@@ -6581,7 +6581,7 @@ interactions:
         Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6722,7 +6722,7 @@ interactions:
         accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication
         should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -7250,7 +7250,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required
         retention (days)\",\"description\":\"The required resource logs retention
@@ -7965,7 +7965,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A
         subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A
         group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -8069,7 +8069,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs configurations in 'Security Options -
@@ -8437,7 +8437,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -9106,7 +9106,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -9117,7 +9117,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -9126,7 +9126,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -9366,7 +9366,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -9526,7 +9526,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy
@@ -10181,7 +10181,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -10308,7 +10308,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10356,7 +10356,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10486,7 +10486,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10505,7 +10505,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -10930,7 +10930,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -11106,7 +11106,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -11117,7 +11117,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -11126,7 +11126,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -12221,7 +12221,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -12495,7 +12495,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -12681,7 +12681,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12805,7 +12805,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -12968,7 +12968,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -13322,7 +13322,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -13422,7 +13422,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -13452,7 +13452,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -13546,7 +13546,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -14475,7 +14475,7 @@ interactions:
         RPC) clients\",\"description\":\"Specifies which behaviors are allowed by
         clients for applications using the NTLM Security Support Provider (SSP). The
         SSP Interface (SSPI) is used by applications that need authentication services.
-        See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) servers\",\"description\":\"Specifies which behaviors are allowed by
@@ -14663,7 +14663,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -14915,7 +14915,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -15160,7 +15160,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -15292,7 +15292,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -15506,7 +15506,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -15590,7 +15590,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -15637,7 +15637,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15798,7 +15798,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -16050,7 +16050,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities
         in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container
@@ -16232,7 +16232,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service
@@ -16312,7 +16312,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
         Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include
         Arc connected servers\",\"description\":\"By selecting this option, you agree
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -17031,7 +17031,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -17068,7 +17068,7 @@ interactions:
         the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         IDs\",\"description\":\"For all recommendations, leave empty. For specific
         recommendations, enter a list of recommendation IDs separated by semicolons
-        (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        (';'). Recommendation IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Determines recommendation severities. Example:
         High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
@@ -17139,7 +17139,7 @@ interactions:
         network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -17248,7 +17248,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -17267,7 +17267,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -17288,7 +17288,7 @@ interactions:
         Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -17402,7 +17402,7 @@ interactions:
         Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -18044,7 +18044,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -18237,7 +18237,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This
@@ -18305,7 +18305,7 @@ interactions:
         Defender's extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all control
         plane (master) nodes in the cluster and sends it to the Azure Defender for
-        Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
+        Kubernetes backend in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
         Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in 'System Audit
         Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This
@@ -18591,7 +18591,7 @@ interactions:
         Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -18732,7 +18732,7 @@ interactions:
         accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication
         should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -19260,7 +19260,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required
         retention (days)\",\"description\":\"The required resource logs retention
@@ -19975,7 +19975,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A
         subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A
         group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -20079,7 +20079,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs configurations in 'Security Options -
@@ -20447,7 +20447,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -21116,7 +21116,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -21127,7 +21127,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -21136,7 +21136,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -21376,7 +21376,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -21536,7 +21536,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy
@@ -22191,7 +22191,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -22318,7 +22318,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -22366,7 +22366,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -22496,7 +22496,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -22515,7 +22515,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -22940,7 +22940,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -23116,7 +23116,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -23127,7 +23127,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -23136,7 +23136,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml
index 8d47bad5f87..24295da3d5f 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml
@@ -212,7 +212,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -486,7 +486,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -672,7 +672,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -796,7 +796,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -959,7 +959,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -1313,7 +1313,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -1413,7 +1413,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -1443,7 +1443,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -1537,7 +1537,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -2466,7 +2466,7 @@ interactions:
         RPC) clients\",\"description\":\"Specifies which behaviors are allowed by
         clients for applications using the NTLM Security Support Provider (SSP). The
         SSP Interface (SSPI) is used by applications that need authentication services.
-        See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) servers\",\"description\":\"Specifies which behaviors are allowed by
@@ -2654,7 +2654,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -2906,7 +2906,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -3151,7 +3151,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -3283,7 +3283,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3497,7 +3497,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3581,7 +3581,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -3628,7 +3628,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -3789,7 +3789,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -4041,7 +4041,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities
         in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container
@@ -4223,7 +4223,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service
@@ -4303,7 +4303,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
         Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include
         Arc connected servers\",\"description\":\"By selecting this option, you agree
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -5022,7 +5022,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -5059,7 +5059,7 @@ interactions:
         the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         IDs\",\"description\":\"For all recommendations, leave empty. For specific
         recommendations, enter a list of recommendation IDs separated by semicolons
-        (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        (';'). Recommendation IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Determines recommendation severities. Example:
         High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
@@ -5130,7 +5130,7 @@ interactions:
         network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -5239,7 +5239,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -5258,7 +5258,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -5279,7 +5279,7 @@ interactions:
         Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -5393,7 +5393,7 @@ interactions:
         Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6035,7 +6035,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -6228,7 +6228,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This
@@ -6296,7 +6296,7 @@ interactions:
         Defender's extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all control
         plane (master) nodes in the cluster and sends it to the Azure Defender for
-        Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
+        Kubernetes backend in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
         Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in 'System Audit
         Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This
@@ -6582,7 +6582,7 @@ interactions:
         Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6723,7 +6723,7 @@ interactions:
         accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication
         should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -7251,7 +7251,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required
         retention (days)\",\"description\":\"The required resource logs retention
@@ -7966,7 +7966,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A
         subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A
         group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -8070,7 +8070,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs configurations in 'Security Options -
@@ -8438,7 +8438,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -9107,7 +9107,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -9118,7 +9118,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -9127,7 +9127,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -9367,7 +9367,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -9527,7 +9527,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy
@@ -10182,7 +10182,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -10309,7 +10309,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10357,7 +10357,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10487,7 +10487,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10506,7 +10506,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -10931,7 +10931,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -11107,7 +11107,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -11118,7 +11118,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -11127,7 +11127,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -12085,7 +12085,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -12359,7 +12359,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -12545,7 +12545,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12669,7 +12669,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -12832,7 +12832,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -13186,7 +13186,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -13286,7 +13286,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -13316,7 +13316,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -13410,7 +13410,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -14339,7 +14339,7 @@ interactions:
         RPC) clients\",\"description\":\"Specifies which behaviors are allowed by
         clients for applications using the NTLM Security Support Provider (SSP). The
         SSP Interface (SSPI) is used by applications that need authentication services.
-        See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) servers\",\"description\":\"Specifies which behaviors are allowed by
@@ -14527,7 +14527,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -14779,7 +14779,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -15024,7 +15024,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -15156,7 +15156,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -15370,7 +15370,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -15454,7 +15454,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -15501,7 +15501,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15662,7 +15662,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15914,7 +15914,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities
         in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container
@@ -16096,7 +16096,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service
@@ -16176,7 +16176,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
         Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include
         Arc connected servers\",\"description\":\"By selecting this option, you agree
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -16895,7 +16895,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -16932,7 +16932,7 @@ interactions:
         the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         IDs\",\"description\":\"For all recommendations, leave empty. For specific
         recommendations, enter a list of recommendation IDs separated by semicolons
-        (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        (';'). Recommendation IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Determines recommendation severities. Example:
         High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
@@ -17003,7 +17003,7 @@ interactions:
         network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -17112,7 +17112,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -17131,7 +17131,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -17152,7 +17152,7 @@ interactions:
         Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -17266,7 +17266,7 @@ interactions:
         Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -17908,7 +17908,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -18101,7 +18101,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This
@@ -18169,7 +18169,7 @@ interactions:
         Defender's extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all control
         plane (master) nodes in the cluster and sends it to the Azure Defender for
-        Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
+        Kubernetes backend in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
         Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in 'System Audit
         Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This
@@ -18455,7 +18455,7 @@ interactions:
         Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -18596,7 +18596,7 @@ interactions:
         accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication
         should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -19124,7 +19124,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required
         retention (days)\",\"description\":\"The required resource logs retention
@@ -19839,7 +19839,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A
         subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A
         group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -19943,7 +19943,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs configurations in 'Security Options -
@@ -20311,7 +20311,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -20980,7 +20980,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -20991,7 +20991,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -21000,7 +21000,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -21240,7 +21240,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -21400,7 +21400,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy
@@ -22055,7 +22055,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -22182,7 +22182,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -22230,7 +22230,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -22360,7 +22360,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -22379,7 +22379,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -22804,7 +22804,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -22980,7 +22980,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -22991,7 +22991,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -23000,7 +23000,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml
index cd2a31da03f..3bd7989315c 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml
@@ -863,7 +863,7 @@ interactions:
         setting enabled","policyType":"BuiltIn","mode":"Indexed","description":"Include
         this rule to deploy the requirements to audit that Windows machines have the
         password complexity setting enabled. More information on this security setting
-        can be found here: https://docs.microsoft.com/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.
+        can be found here: https://learn.microsoft.com/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.
         This policy should only be used along with its corresponding audit policy
         in an initiative/policy set. For more information on guest configuration policies,
         please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"PasswordMustMeetComplexityRequirements"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''),
@@ -1272,7 +1272,7 @@ interactions:
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces/eventhubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/eventHubs/authorizationRules"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d","type":"Microsoft.Authorization/policyDefinitions","name":"f4826e5f-6a27-407c-ae3e-9582eb39891d"},{"properties":{"displayName":"[Preview]:
         Audit that Windows VMs have the password complexity setting enabled","policyType":"BuiltIn","mode":"All","description":"This
         policy will audit that Windows machines have the password complexity setting
-        enabled. More information on this security setting can be found here: https://docs.microsoft.com/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.
+        enabled. More information on this security setting can be found here: https://learn.microsoft.com/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.
         This policy should only be used along with its corresponding deploy policy
         in an initiative/policy set. For more information on guest configuration policies,
         please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"PasswordMustMeetComplexityRequirements"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb","type":"Microsoft.Authorization/policyDefinitions","name":"f48b2913-1dc5-4834-8c72-ccc1dfd819bb"},{"properties":{"displayName":"Deploy
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml
index fdc9dc9e560..d95df0e0c72 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml
@@ -54,7 +54,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -328,7 +328,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -514,7 +514,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -638,7 +638,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -801,7 +801,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -1155,7 +1155,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -1255,7 +1255,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -1285,7 +1285,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -1379,7 +1379,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -2308,7 +2308,7 @@ interactions:
         RPC) clients\",\"description\":\"Specifies which behaviors are allowed by
         clients for applications using the NTLM Security Support Provider (SSP). The
         SSP Interface (SSPI) is used by applications that need authentication services.
-        See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) servers\",\"description\":\"Specifies which behaviors are allowed by
@@ -2496,7 +2496,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -2748,7 +2748,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -2993,7 +2993,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -3125,7 +3125,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3339,7 +3339,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3423,7 +3423,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -3470,7 +3470,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -3631,7 +3631,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -3883,7 +3883,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities
         in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container
@@ -4065,7 +4065,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service
@@ -4145,7 +4145,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest
         Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include
         Arc connected servers\",\"description\":\"By selecting this option, you agree
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -4864,7 +4864,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -4901,7 +4901,7 @@ interactions:
         the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         IDs\",\"description\":\"For all recommendations, leave empty. For specific
         recommendations, enter a list of recommendation IDs separated by semicolons
-        (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        (';'). Recommendation IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Determines recommendation severities. Example:
         High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
@@ -4972,7 +4972,7 @@ interactions:
         network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -5081,7 +5081,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -5100,7 +5100,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -5121,7 +5121,7 @@ interactions:
         Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -5235,7 +5235,7 @@ interactions:
         Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -5877,7 +5877,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -6070,7 +6070,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This
@@ -6138,7 +6138,7 @@ interactions:
         Defender's extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all control
         plane (master) nodes in the cluster and sends it to the Azure Defender for
-        Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
+        Kubernetes backend in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]:
         Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in 'System Audit
         Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This
@@ -6424,7 +6424,7 @@ interactions:
         Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6565,7 +6565,7 @@ interactions:
         accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication
         should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -7093,7 +7093,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required
         retention (days)\",\"description\":\"The required resource logs retention
@@ -7808,7 +7808,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A
         subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A
         group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -7912,7 +7912,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Show audit results from Windows VMs configurations in 'Security Options -
@@ -8280,7 +8280,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -8949,7 +8949,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -8960,7 +8960,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -8969,7 +8969,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -9209,7 +9209,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -9369,7 +9369,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy
@@ -10024,7 +10024,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -10151,7 +10151,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10199,7 +10199,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10329,7 +10329,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -10348,7 +10348,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -10773,7 +10773,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -10949,7 +10949,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -10960,7 +10960,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -10969,7 +10969,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -11700,7 +11700,7 @@ interactions:
         accounts should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Batch/batchAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563","type":"Microsoft.Authorization/policyDefinitions","name":"009a0c92-f5b4-4776-9b66-4ed2b4775563"}'
     headers:
       cache-control:
@@ -14009,7 +14009,7 @@ interactions:
       string: '{"properties":{"displayName":"Configure Data Factories to disable public
         network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories"},{"field":"Microsoft.DataFactory/factories/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5"],"operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2018-06-01'')]","operation":"addOrReplace","field":"Microsoft.DataFactory/factories/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7","type":"Microsoft.Authorization/policyDefinitions","name":"08b1442b-7789-4130-8506-4f99a97226a7"}'
@@ -15579,7 +15579,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462","type":"Microsoft.Authorization/policyDefinitions","name":"0c2b3618-68a8-4034-a150-ff4abc873462"}'
     headers:
       cache-control:
@@ -16748,7 +16748,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","equals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Batch/batchAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["batchAccount"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73","type":"Microsoft.Authorization/policyDefinitions","name":"0ef5aac7-c064-427a-b87b-d47b3ddcaf73"}'
@@ -17943,7 +17943,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."}},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -20269,7 +20269,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"field":"Microsoft.ServiceBus/namespaces/sku.tier","equals":"Premium"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ServiceBus/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d","type":"Microsoft.Authorization/policyDefinitions","name":"1c06e275-d63d-4540-b761-71f364c2111d"}'
     headers:
@@ -21057,7 +21057,7 @@ interactions:
         use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone Id","strongType":"Microsoft.Network/privateDnsZones"}},"targetSubResource":{"type":"String","metadata":{"displayName":"Target
         sub-resource","description":"Target sub resource the private endpoint connects
         to"},"allowedValues":["Dev","Sql","SqlOnDemand"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -21442,7 +21442,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"anyOf":[{"anyOf":[{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri","equals":""},{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri","exists":"false"}]},{"anyOf":[{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName","equals":""},{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName","exists":"false"}]},{"not":{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion","exists":"true"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2","type":"Microsoft.Authorization/policyDefinitions","name":"1f68a601-6e6d-4e42-babf-3f643a047ea2"}'
     headers:
       cache-control:
@@ -22150,7 +22150,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.","metadata":{"version":"1.1.0","category":"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.","metadata":{"version":"1.1.0","category":"VM
         Image Builder"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.VirtualMachineImages/imageTemplates"},{"field":"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","type":"Microsoft.Authorization/policyDefinitions","name":"2154edb9-244f-4741-9970-660785bccdaa"}'
     headers:
@@ -28826,7 +28826,7 @@ interactions:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) clients","description":"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."}},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"[Deprecated]:
         Network security: Minimum session security for NTLM SSP based (including secure
         RPC) servers","description":"Specifies which behaviors are allowed by servers
@@ -30116,7 +30116,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Dev"],"requestMessage":"Auto
@@ -31924,7 +31924,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.1.0","category":"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.1.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"count":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","type":"Microsoft.Authorization/policyDefinitions","name":"40cec1dd-a100-4920-b15b-3024fe8901ab"}'
     headers:
@@ -33586,7 +33586,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn''t exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/Redis"},{"field":"Microsoft.Cache/Redis/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663","type":"Microsoft.Authorization/policyDefinitions","name":"470baccb-7e51-4549-8b1a-3e5be069f663"}'
     headers:
       cache-control:
@@ -34669,7 +34669,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -35866,7 +35866,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -36554,7 +36554,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."}},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -36769,7 +36769,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"}'
     headers:
@@ -38033,7 +38033,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to your CosmosDB account, data leakage
-        risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"}'
     headers:
@@ -40079,7 +40079,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"}'
     headers:
@@ -41312,7 +41312,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"}'
     headers:
@@ -41996,7 +41996,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.0.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -46298,7 +46298,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to Azure Synapse workspace, data leakage
-        risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"}'
     headers:
       cache-control:
@@ -46500,7 +46500,7 @@ interactions:
         workflow automation are created.","strongType":"location"}},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."}},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -46920,7 +46920,7 @@ interactions:
         for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"}'
     headers:
       cache-control:
@@ -48065,7 +48065,7 @@ interactions:
         lets you connect your virtual network to Azure services without a public IP
         address at the source or destination. By mapping private endpoints to your
         Azure Cache for Redis instances, data leakage risks are reduced. Learn more
-        at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"}'
     headers:
       cache-control:
@@ -48160,7 +48160,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -48257,7 +48257,7 @@ interactions:
         network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"}'
     headers:
@@ -49134,7 +49134,7 @@ interactions:
         private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -52332,7 +52332,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -53897,7 +53897,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to Azure Data Factory, data leakage
-        risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"}'
     headers:
@@ -54466,7 +54466,7 @@ interactions:
         Defender''s extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all control
         plane (master) nodes in the cluster and sends it to the Azure Defender for
-        Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]:
+        Kubernetes backend in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]:
         Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"}'
     headers:
       cache-control:
@@ -55342,7 +55342,7 @@ interactions:
         endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -56513,7 +56513,7 @@ interactions:
         network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"}'
     headers:
       cache-control:
@@ -60360,7 +60360,7 @@ interactions:
         HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"}'
@@ -66248,7 +66248,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -66869,7 +66869,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to Event Hub namespaces, data leakage
-        risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"}'
     headers:
@@ -69484,7 +69484,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"}'
@@ -74294,7 +74294,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."}},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -74305,7 +74305,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -74313,7 +74313,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."}},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -75819,7 +75819,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"}'
     headers:
       cache-control:
@@ -77007,7 +77007,7 @@ interactions:
         public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"}'
@@ -81254,7 +81254,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"}'
     headers:
       cache-control:
@@ -82603,7 +82603,7 @@ interactions:
         private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -82915,7 +82915,7 @@ interactions:
         to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -83997,7 +83997,7 @@ interactions:
         private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -84105,7 +84105,7 @@ interactions:
         group location","description":"The location where the resource group and the
         workflow automation are created.","strongType":"location"}},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -86917,7 +86917,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"}'
     headers:
       cache-control:
@@ -88282,7 +88282,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."}},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -88293,7 +88293,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -88301,7 +88301,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."}},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_bicep_list_versions.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_bicep_list_versions.yaml
index c63a0971a45..5c2f0440483 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_bicep_list_versions.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_bicep_list_versions.yaml
@@ -66,11 +66,11 @@ interactions:
         directory to your PATH and run `bicep publish file.bicep --target ''br:foo.azurecr.io/myModule:v1.0''`.
         Apologies for this oversight.\r\n\r\n## Highlights\r\n\r\nBicep team:\r\n*
         Private Module registry support\r\n  - Documentation:\r\n    * [Create a private
-        registry](https://docs.microsoft.com/azure/azure-resource-manager/bicep/private-module-registry)\r\n    *
-        [Reference modules in a registry](https://docs.microsoft.com/azure/azure-resource-manager/bicep/modules#file-in-registry)\r\n    *
-        [`publish`](https://docs.microsoft.com/azure/azure-resource-manager/bicep/bicep-cli#publish)
-        and [`restore`](https://docs.microsoft.com/azure/azure-resource-manager/bicep/bicep-cli#restore)
-        commands\r\n    * [Adding registry aliases via bicepconfig.json](https://docs.microsoft.com/azure/azure-resource-manager/bicep/bicep-config#aliases-for-module-registry)\r\n  -
+        registry](https://learn.microsoft.com/azure/azure-resource-manager/bicep/private-module-registry)\r\n    *
+        [Reference modules in a registry](https://learn.microsoft.com/azure/azure-resource-manager/bicep/modules#file-in-registry)\r\n    *
+        [`publish`](https://learn.microsoft.com/azure/azure-resource-manager/bicep/bicep-cli#publish)
+        and [`restore`](https://learn.microsoft.com/azure/azure-resource-manager/bicep/bicep-cli#restore)
+        commands\r\n    * [Adding registry aliases via bicepconfig.json](https://learn.microsoft.com/azure/azure-resource-manager/bicep/bicep-config#aliases-for-module-registry)\r\n  -
         **Note:** This does **not** include support for a planned *public* registry
         which will be released with Bicep v0.5 (ETA early November)\r\n* Implement
         TemplateSpec module references (#4269)\r\n  - Template specs can be used as
@@ -117,7 +117,7 @@ interactions:
         better version example; only reinforce identity for extension (#4309)\r\n*
         Readme - Build badge should link to build results (#4431)\r\n\r\n@rajyraman\r\n*
         Logic App Workflow and Integration Account Snippet (#3919)\r\n\r\n@StefanIvemo\r\n*
-        Updated readme with links to learn path and docs.microsoft.com (#4036)\r\n*
+        Updated readme with links to learn path and learn.microsoft.com (#4036)\r\n*
         [Snippet] Added ExpressRoute Gateway snippet (#3920)\r\n* [Snippet] Added
         Route Server snippet (#3976)\r\n* Fixed bug in `res-container-registry` snippet
         (#4597)\r\n","reactions":{"url":"https://api.github.com/repos/Azure/bicep/releases/51445655/reactions","total_count":7,"+1":0,"-1":0,"laugh":0,"hooray":4,"confused":0,"heart":0,"rocket":3,"eyes":0},"mentions_count":9},{"url":"https://api.github.com/repos/Azure/bicep/releases/47575409","assets_url":"https://api.github.com/repos/Azure/bicep/releases/47575409/assets","upload_url":"https://uploads.github.com/repos/Azure/bicep/releases/47575409/assets{?name,label}","html_url":"https://github.com/Azure/bicep/releases/tag/v0.4.613","id":47575409,"author":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"node_id":"MDc6UmVsZWFzZTQ3NTc1NDA5","tag_name":"v0.4.613","target_commitish":"main","name":"v0.4.613","draft":false,"prerelease":false,"created_at":"2021-08-10T00:36:23Z","published_at":"2021-08-10T23:01:38Z","assets":[{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103988","id":42103988,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTg4","name":"Azure.Bicep.CommandLine.linux-x64.0.4.613.nupkg","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":19071061,"download_count":10,"created_at":"2021-08-10T02:44:29Z","updated_at":"2021-08-10T02:44:35Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/Azure.Bicep.CommandLine.linux-x64.0.4.613.nupkg"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42104017","id":42104017,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTA0MDE3","name":"Azure.Bicep.CommandLine.osx-x64.0.4.613.nupkg","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":19295354,"download_count":5,"created_at":"2021-08-10T02:44:48Z","updated_at":"2021-08-10T02:44:49Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/Azure.Bicep.CommandLine.osx-x64.0.4.613.nupkg"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103962","id":42103962,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTYy","name":"Azure.Bicep.CommandLine.win-x64.0.4.613.nupkg","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":19245344,"download_count":23,"created_at":"2021-08-10T02:44:15Z","updated_at":"2021-08-10T02:44:21Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/Azure.Bicep.CommandLine.win-x64.0.4.613.nupkg"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103930","id":42103930,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTMw","name":"Azure.Bicep.MSBuild.0.4.613.nupkg","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":38167,"download_count":7,"created_at":"2021-08-10T02:43:48Z","updated_at":"2021-08-10T02:43:48Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/Azure.Bicep.MSBuild.0.4.613.nupkg"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103937","id":42103937,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTM3","name":"Azure.Bicep.MSBuild.0.4.613.snupkg","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":6648,"download_count":4,"created_at":"2021-08-10T02:43:50Z","updated_at":"2021-08-10T02:43:50Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/Azure.Bicep.MSBuild.0.4.613.snupkg"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103939","id":42103939,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTM5","name":"bicep-langserver.zip","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/zip","state":"uploaded","size":8790505,"download_count":31,"created_at":"2021-08-10T02:43:52Z","updated_at":"2021-08-10T02:43:53Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/bicep-langserver.zip"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103913","id":42103913,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTEz","name":"bicep-linux-musl-x64","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":42277953,"download_count":8951,"created_at":"2021-08-10T02:43:06Z","updated_at":"2021-08-10T02:43:08Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/bicep-linux-musl-x64"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103905","id":42103905,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTA1","name":"bicep-linux-x64","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":42457849,"download_count":140730,"created_at":"2021-08-10T02:42:54Z","updated_at":"2021-08-10T02:42:56Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/bicep-linux-x64"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103917","id":42103917,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTE3","name":"bicep-osx-x64","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/octet-stream","state":"uploaded","size":43245909,"download_count":3424,"created_at":"2021-08-10T02:43:19Z","updated_at":"2021-08-10T02:43:21Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/bicep-osx-x64"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103927","id":42103927,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTI3","name":"bicep-setup-win-x64.exe","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/x-msdownload","state":"uploaded","size":16640624,"download_count":2810,"created_at":"2021-08-10T02:43:42Z","updated_at":"2021-08-10T02:43:43Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/bicep-setup-win-x64.exe"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103928","id":42103928,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTI4","name":"bicep-win-x64.exe","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/x-msdownload","state":"uploaded","size":41112624,"download_count":58972,"created_at":"2021-08-10T02:43:44Z","updated_at":"2021-08-10T02:43:46Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/bicep-win-x64.exe"},{"url":"https://api.github.com/repos/Azure/bicep/releases/assets/42103947","id":42103947,"node_id":"MDEyOlJlbGVhc2VBc3NldDQyMTAzOTQ3","name":"vscode-bicep.vsix","label":"","uploader":{"login":"majastrz","id":22460039,"node_id":"MDQ6VXNlcjIyNDYwMDM5","avatar_url":"https://avatars.githubusercontent.com/u/22460039?v=4","gravatar_id":"","url":"https://api.github.com/users/majastrz","html_url":"https://github.com/majastrz","followers_url":"https://api.github.com/users/majastrz/followers","following_url":"https://api.github.com/users/majastrz/following{/other_user}","gists_url":"https://api.github.com/users/majastrz/gists{/gist_id}","starred_url":"https://api.github.com/users/majastrz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majastrz/subscriptions","organizations_url":"https://api.github.com/users/majastrz/orgs","repos_url":"https://api.github.com/users/majastrz/repos","events_url":"https://api.github.com/users/majastrz/events{/privacy}","received_events_url":"https://api.github.com/users/majastrz/received_events","type":"User","site_admin":false},"content_type":"application/vsix","state":"uploaded","size":24202823,"download_count":175,"created_at":"2021-08-10T02:44:05Z","updated_at":"2021-08-10T02:44:07Z","browser_download_url":"https://github.com/Azure/bicep/releases/download/v0.4.613/vscode-bicep.vsix"}],"tarball_url":"https://api.github.com/repos/Azure/bicep/tarball/v0.4.613","zipball_url":"https://api.github.com/repos/Azure/bicep/zipball/v0.4.613","body":"##
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_feature_registration_list.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_feature_registration_list.yaml
index c2af1fc2c5d..619a9975999 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_feature_registration_list.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_feature_registration_list.yaml
@@ -18,7 +18,7 @@ interactions:
     body:
       string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RedHatOpenShift/subscriptionFeatureRegistrations/preview","name":"Microsoft.RedHatOpenShift/preview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"preview","providerNamespace":"Microsoft.RedHatOpenShift","state":"NotRegistered","releaseDate":"2019-11-18T22:38:42.7037519Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIaaS/subscriptionFeatureRegistrations/cloudSimpleRp1","name":"CloudSimple.PrivateCloudIaaS/cloudSimpleRp1","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp1","providerNamespace":"CloudSimple.PrivateCloudIaaS","state":"NotRegistered","releaseDate":"2018-02-15T21:48:17.7677165Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp10","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp10","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp10","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:03:50.9762262Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp11","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp11","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp11","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:04:16.2087448Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp12","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp12","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp12","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:04:48.9856297Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp13","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp13","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp13","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:05:13.8374919Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp14","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp14","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp14","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:05:48.1563217Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp15","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp15","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp15","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:06:11.4136814Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp16","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp16","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp16","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:06:38.3573884Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp17","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp17","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp17","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:07:05.1688161Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp18","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp18","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp18","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:07:37.505866Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp19","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp19","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp19","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:08:02.3235303Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp2","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp2","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-02-22T00:32:30.7664964Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp20","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp20","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp20","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:15:09.2611888Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp21","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp21","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp21","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:15:37.0365928Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp22","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp22","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp22","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:16:03.6219464Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp23","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp23","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp23","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:17:06.5935123Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp24","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp24","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp24","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:17:37.4712969Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp25","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp25","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp25","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:22:21.2169851Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp6","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp6","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp6","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:02:17.0853451Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp7","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp7","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp7","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:00:39.0224166Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp8","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp8","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp8","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:01:17.2443362Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/cloudSimpleRp9","name":"CloudSimple.PrivateCloudIAAS/cloudSimpleRp9","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"cloudSimpleRp9","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-07-27T21:01:47.2398988Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/CloudSimple.PrivateCloudIAAS/subscriptionFeatureRegistrations/stagingRP","name":"CloudSimple.PrivateCloudIAAS/stagingRP","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"stagingRP","providerNamespace":"CloudSimple.PrivateCloudIAAS","state":"NotRegistered","releaseDate":"2018-10-31T00:02:19.0101281Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AAD/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.AAD/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.AAD","state":"NotRegistered","releaseDate":"2016-12-09T21:52:57.320344Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AAD/subscriptionFeatureRegistrations/previewAccess","name":"Microsoft.AAD/previewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"previewAccess","providerNamespace":"Microsoft.AAD","state":"NotRegistered","releaseDate":"2017-06-30T18:16:00.3134564Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AAD/subscriptionFeatureRegistrations/tipAccess","name":"Microsoft.AAD/tipAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"tipAccess","providerNamespace":"Microsoft.AAD","state":"NotRegistered","releaseDate":"2017-03-15T23:49:18.3127255Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.aadiam/subscriptionFeatureRegistrations/betalogconnector","name":"microsoft.aadiam/betalogconnector","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betalogconnector","providerNamespace":"microsoft.aadiam","state":"NotRegistered","releaseDate":"2017-04-03T20:07:45.0802848Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.aadiam/subscriptionFeatureRegistrations/testinproduction","name":"microsoft.aadiam/testinproduction","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"testinproduction","providerNamespace":"microsoft.aadiam","state":"NotRegistered","releaseDate":"2017-09-18T21:30:20.8015565Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Advisor/subscriptionFeatureRegistrations/dev","name":"Microsoft.Advisor/dev","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"dev","displayName":"dev","providerNamespace":"Microsoft.Advisor","state":"NotRegistered","releaseDate":"2017-03-09T21:53:27.646184Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.alertsmanagement/subscriptionFeatureRegistrations/enableSmartDiagnostics","name":"microsoft.alertsmanagement/enableSmartDiagnostics","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"enableSmartDiagnostics","providerNamespace":"microsoft.alertsmanagement","state":"NotRegistered","releaseDate":"2019-04-11T11:32:03.7384362Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ApiManagement/subscriptionFeatureRegistrations/testinproduction","name":"Microsoft.ApiManagement/testinproduction","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"testinproduction","providerNamespace":"Microsoft.ApiManagement","state":"NotRegistered","releaseDate":"2019-04-11T23:55:33.7595915Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ApiManagement/subscriptionFeatureRegistrations/testinproductionmdm","name":"Microsoft.ApiManagement/testinproductionmdm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"testinproductionmdm","providerNamespace":"Microsoft.ApiManagement","state":"NotRegistered","releaseDate":"2019-04-11T23:54:58.8877038Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Archive/subscriptionFeatureRegistrations/PreviewAccess","name":"Microsoft.Archive/PreviewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PreviewAccess","providerNamespace":"Microsoft.Archive","state":"NotRegistered","releaseDate":"2016-06-09T23:45:55.8018586Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/aseAccess","name":"Microsoft.Automation/aseAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"aseAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2016-04-04T17:40:03.715163Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/ccAccess","name":"Microsoft.Automation/ccAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ccAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2016-06-30T17:11:02.3581707Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/ciAccess","name":"Microsoft.Automation/ciAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ciAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2015-10-12T20:09:11.3182098Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/dsc","name":"Microsoft.Automation/dsc","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"dsc","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2015-03-28T02:09:29.1977722Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/eapAccess","name":"Microsoft.Automation/eapAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"eapAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2016-12-08T00:12:49.9522002Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/ncusAccess","name":"Microsoft.Automation/ncusAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ncusAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2015-07-16T22:15:52.6837516Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/neAccess","name":"Microsoft.Automation/neAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"neAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2016-06-30T17:14:15.0267434Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/scusAccess","name":"Microsoft.Automation/scusAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"scusAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2015-05-28T01:35:29.3168339Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Automation/subscriptionFeatureRegistrations/wcusuksAccess","name":"Microsoft.Automation/wcusuksAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"wcusuksAccess","providerNamespace":"Microsoft.Automation","state":"NotRegistered","releaseDate":"2016-12-08T00:12:09.3287187Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureActiveDirectory/subscriptionFeatureRegistrations/B2CV2Resource","name":"Microsoft.AzureActiveDirectory/B2CV2Resource","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"B2CV2Resource","providerNamespace":"Microsoft.AzureActiveDirectory","state":"NotRegistered","releaseDate":"2019-05-14T00:47:00.0700952Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureActiveDirectory/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.AzureActiveDirectory/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.AzureActiveDirectory","state":"NotRegistered","releaseDate":"2016-09-13T19:41:19.3971177Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureActiveDirectory/subscriptionFeatureRegistrations/CPIMCSP","name":"Microsoft.AzureActiveDirectory/CPIMCSP","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CPIMCSP","providerNamespace":"Microsoft.AzureActiveDirectory","state":"NotRegistered","releaseDate":"2018-08-24T17:29:09.1879928Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureData/subscriptionFeatureRegistrations/eosEarlyAccess","name":"Microsoft.AzureData/eosEarlyAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"eosEarlyAccess","providerNamespace":"Microsoft.AzureData","state":"NotRegistered","releaseDate":"2019-05-08T19:42:01.3003979Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureData/subscriptionFeatureRegistrations/tinaEarlyAccess","name":"Microsoft.AzureData/tinaEarlyAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"tinaEarlyAccess","displayName":"","providerNamespace":"Microsoft.AzureData","state":"NotRegistered","releaseDate":"2019-08-02T22:28:59.2890673Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureStack/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.AzureStack/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.AzureStack","state":"NotRegistered","releaseDate":"2016-08-01T22:33:07.9019081Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.AzureStack/subscriptionFeatureRegistrations/Marketplace","name":"Microsoft.AzureStack/Marketplace","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Marketplace","providerNamespace":"Microsoft.AzureStack","state":"NotRegistered","releaseDate":"2016-08-01T22:26:20.2074909Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Batch/subscriptionFeatureRegistrations/BatchAccountWhitelistSAN","name":"Microsoft.Batch/BatchAccountWhitelistSAN","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"BatchAccountWhitelistSAN","providerNamespace":"Microsoft.Batch","state":"NotRegistered","releaseDate":"2019-02-19T21:27:52.5147799Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Batch/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.Batch/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","displayName":"betaAccess","providerNamespace":"Microsoft.Batch","state":"NotRegistered","releaseDate":"2014-09-23T00:27:44.6314573Z","description":"betaAccess","approvalType":"AutoApproval","documentationLink":"betaAccess","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Batch/subscriptionFeatureRegistrations/portaltest","name":"Microsoft.Batch/portaltest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"portaltest","providerNamespace":"Microsoft.Batch","state":"NotRegistered","releaseDate":"2016-03-09T19:17:24.3129475Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Batch/subscriptionFeatureRegistrations/portaltest2","name":"Microsoft.Batch/portaltest2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"portaltest2","providerNamespace":"Microsoft.Batch","state":"NotRegistered","releaseDate":"2019-03-01T00:44:57.4358403Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Batch/subscriptionFeatureRegistrations/SwiftProd","name":"Microsoft.Batch/SwiftProd","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwiftProd","providerNamespace":"Microsoft.Batch","state":"NotRegistered","releaseDate":"2019-05-08T17:06:51.2810504Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.BatchAI/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.BatchAI/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.BatchAI","state":"NotRegistered","releaseDate":"2017-09-07T19:40:57.8210213Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.BatchAI/subscriptionFeatureRegistrations/workspace","name":"Microsoft.BatchAI/workspace","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"workspace","providerNamespace":"Microsoft.BatchAI","state":"NotRegistered","releaseDate":"2018-06-05T17:17:06.0175391Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.BigAnalytics/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.BigAnalytics/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.BigAnalytics","state":"NotRegistered","releaseDate":"2015-09-14T17:07:58.6619547Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Blockchain/subscriptionFeatureRegistrations/privatePreviewAccess","name":"Microsoft.Blockchain/privatePreviewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"privatePreviewAccess","providerNamespace":"Microsoft.Blockchain","state":"NotRegistered","releaseDate":"2018-06-21T01:28:34.2289911Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Cache/subscriptionFeatureRegistrations/betaAccess2","name":"Microsoft.Cache/betaAccess2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess2","providerNamespace":"Microsoft.Cache","state":"NotRegistered","releaseDate":"2014-12-18T19:28:44.8818197Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Cache/subscriptionFeatureRegistrations/betaAccess3","name":"Microsoft.Cache/betaAccess3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess3","providerNamespace":"Microsoft.Cache","state":"NotRegistered","releaseDate":"2014-12-18T19:57:00.4637381Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.cache/subscriptionFeatureRegistrations/CanaryCheckNameAvailability","name":"microsoft.cache/CanaryCheckNameAvailability","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanaryCheckNameAvailability","providerNamespace":"microsoft.cache","state":"NotRegistered","releaseDate":"2019-05-22T21:15:37.5400397Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ClassicIaaSMigrate/subscriptionFeatureRegistrations/ClassicIaaSMigrate","name":"Microsoft.ClassicIaaSMigrate/ClassicIaaSMigrate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ClassicIaaSMigrate","providerNamespace":"Microsoft.ClassicIaaSMigrate","state":"NotRegistered","releaseDate":"2015-11-06T19:34:09.0991358Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ClassicInfrastructureMigrate/subscriptionFeatureRegistrations/ClassicInfrastructureMigrate","name":"Microsoft.ClassicInfrastructureMigrate/ClassicInfrastructureMigrate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ClassicInfrastructureMigrate","providerNamespace":"Microsoft.ClassicInfrastructureMigrate","state":"NotRegistered","releaseDate":"2016-01-20T02:19:12.2771139Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ClassicSubscription/subscriptionFeatureRegistrations/InternalTest","name":"Microsoft.ClassicSubscription/InternalTest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"InternalTest","providerNamespace":"Microsoft.ClassicSubscription","state":"NotRegistered","releaseDate":"2017-07-13T22:01:49.4035102Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.cloudes/subscriptionFeatureRegistrations/internalmsft","name":"microsoft.cloudes/internalmsft","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"internalmsft","providerNamespace":"microsoft.cloudes","state":"NotRegistered","releaseDate":"2017-03-01T19:14:37.4706442Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.cloudes/subscriptionFeatureRegistrations/internalonly","name":"microsoft.cloudes/internalonly","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"internalonly","providerNamespace":"microsoft.cloudes","state":"NotRegistered","releaseDate":"2017-02-02T21:53:45.0789712Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.cloudes/subscriptionFeatureRegistrations/testinproduction","name":"microsoft.cloudes/testinproduction","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"testinproduction","providerNamespace":"microsoft.cloudes","state":"NotRegistered","releaseDate":"2017-02-02T21:53:02.807709Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.CognitiveServices/subscriptionFeatureRegistrations/absLuisAuthoring","name":"Microsoft.CognitiveServices/absLuisAuthoring","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"absLuisAuthoring","displayName":"","providerNamespace":"Microsoft.CognitiveServices","state":"NotRegistered","releaseDate":"2019-09-27T06:34:01.6501241Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.CognitiveServices/subscriptionFeatureRegistrations/AutoApproveFeature","name":"Microsoft.CognitiveServices/AutoApproveFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AutoApproveFeature","providerNamespace":"Microsoft.CognitiveServices","state":"NotRegistered","releaseDate":"2016-12-02T10:24:03.723861Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.CognitiveServices/subscriptionFeatureRegistrations/formUnderstandingPrivatePreview","name":"Microsoft.CognitiveServices/formUnderstandingPrivatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"formUnderstandingPrivatePreview","providerNamespace":"Microsoft.CognitiveServices","state":"NotRegistered","releaseDate":"2019-02-12T19:43:12.1958732Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.CognitiveServices/subscriptionFeatureRegistrations/TokenAuthPreview","name":"Microsoft.CognitiveServices/TokenAuthPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"TokenAuthPreview","providerNamespace":"Microsoft.CognitiveServices","state":"NotRegistered","releaseDate":"2019-03-07T06:05:18.0037318Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AHUB","name":"Microsoft.Compute/AHUB","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AHUB","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-07-20T22:13:24.3423114Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AllowManagedDisksReplaceOSDisk","name":"Microsoft.Compute/AllowManagedDisksReplaceOSDisk","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowManagedDisksReplaceOSDisk","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-12-01T08:57:11.2547082Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AllowPreReleaseRegions","name":"Microsoft.Compute/AllowPreReleaseRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPreReleaseRegions","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2015-05-20T21:33:59.0450415Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/armApiPreviewAccess","name":"Microsoft.Compute/armApiPreviewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"armApiPreviewAccess","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2014-11-24T18:59:00.4758382Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AutomaticOSUpgradeWithGalleryImage","name":"Microsoft.Compute/AutomaticOSUpgradeWithGalleryImage","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AutomaticOSUpgradeWithGalleryImage","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-11-22T01:56:41.1373414Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AutoOSUpgradePreview","name":"Microsoft.Compute/AutoOSUpgradePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AutoOSUpgradePreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-05-17T22:10:59.6441016Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AvailabilitySetPinning","name":"Microsoft.Compute/AvailabilitySetPinning","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AvailabilitySetPinning","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-08-15T04:10:36.3880133Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AzAP","name":"Microsoft.Compute/AzAP","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AzAP","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-04-24T21:30:34.7408875Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AzureVirtualMachineSerialConsole","name":"Microsoft.Compute/AzureVirtualMachineSerialConsole","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AzureVirtualMachineSerialConsole","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-06-23T17:11:34.1824614Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/AZBalancing","name":"Microsoft.Compute/AZBalancing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AZBalancing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-01-19T23:19:45.7732838Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/BatchGetTenantInformantionRequests","name":"Microsoft.Compute/BatchGetTenantInformantionRequests","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"BatchGetTenantInformantionRequests","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-10-07T21:44:31.1774854Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CanonicalEssentialsPlan","name":"Microsoft.Compute/CanonicalEssentialsPlan","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanonicalEssentialsPlan","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-10-26T01:39:44.5209599Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CanonicalAdvancedSupport","name":"Microsoft.Compute/CanonicalAdvancedSupport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanonicalAdvancedSupport","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-09-21T07:35:55.4553733Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CanonicalEssentialSupport","name":"Microsoft.Compute/CanonicalEssentialSupport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanonicalEssentialSupport","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-01-16T18:47:56.6468185Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CanonicalEssentialsSupport","name":"Microsoft.Compute/CanonicalEssentialsSupport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanonicalEssentialsSupport","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-10-31T23:03:19.8343941Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CAPSImagePublishing","name":"Microsoft.Compute/CAPSImagePublishing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CAPSImagePublishing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-05-20T23:20:24.3731694Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CanonicalStandardSupport","name":"Microsoft.Compute/CanonicalStandardSupport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanonicalStandardSupport","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-09-21T07:35:20.4778333Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/CorPersistence","name":"Microsoft.Compute/CorPersistence","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CorPersistence","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-07-30T00:28:26.2395683Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/DedicatedNodeGroup","name":"Microsoft.Compute/DedicatedNodeGroup","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DedicatedNodeGroup","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-01-12T20:12:43.6494433Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/disableDisksAndSnapshotsPerRGLimit","name":"Microsoft.Compute/disableDisksAndSnapshotsPerRGLimit","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"disableDisksAndSnapshotsPerRGLimit","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-04-13T18:13:12.7102878Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/DisableSerialConsole","name":"Microsoft.Compute/DisableSerialConsole","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DisableSerialConsole","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-30T23:13:48.2354851Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/DisableServiceHealing","name":"Microsoft.Compute/DisableServiceHealing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DisableServiceHealing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-10T19:19:43.140653Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/DsmsSecrets","name":"Microsoft.Compute/DsmsSecrets","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DsmsSecrets","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-07-10T21:50:09.42468Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/EnableCrossSubscriptionWithKeyVaultResources","name":"Microsoft.Compute/EnableCrossSubscriptionWithKeyVaultResources","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableCrossSubscriptionWithKeyVaultResources","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-01-24T18:21:12.2401952Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ExtensionsFastpath","name":"Microsoft.Compute/ExtensionsFastpath","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ExtensionsFastpath","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-04T16:18:05.7206365Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.AllowUnhealthyNode","name":"Microsoft.Compute/Fabric.AllowUnhealthyNode","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.AllowUnhealthyNode","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-10T19:35:19.8577813Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.AzSM.NewDeployment.OptOut","name":"Microsoft.Compute/Fabric.AzSM.NewDeployment.OptOut","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.AzSM.NewDeployment.OptOut","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-07-19T00:58:31.5494641Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.DisableServiceHealing","name":"Microsoft.Compute/Fabric.DisableServiceHealing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.DisableServiceHealing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-10T19:35:04.4101087Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.DisableLiveMigrationGen","name":"Microsoft.Compute/Fabric.DisableLiveMigrationGen","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.DisableLiveMigrationGen","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-16T22:35:45.6582108Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.DisableTenantLeaseOperationsOnNode","name":"Microsoft.Compute/Fabric.DisableTenantLeaseOperationsOnNode","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.DisableTenantLeaseOperationsOnNode","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-22T22:45:21.4661853Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.DisableVMFaultInjectorForTenant","name":"Microsoft.Compute/Fabric.DisableVMFaultInjectorForTenant","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.DisableVMFaultInjectorForTenant","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-03-20T17:26:52.2453675Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableDeadMigrationGen","name":"Microsoft.Compute/Fabric.EnableDeadMigrationGen","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableDeadMigrationGen","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-09-20T21:17:56.5871429Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableCustomizedTenantLiveMigration","name":"Microsoft.Compute/Fabric.EnableCustomizedTenantLiveMigration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableCustomizedTenantLiveMigration","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-02T20:50:25.3500818Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableLiveMigrationGen","name":"Microsoft.Compute/Fabric.EnableLiveMigrationGen","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableLiveMigrationGen","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-14T22:52:54.4423883Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableLiveMigration","name":"Microsoft.Compute/Fabric.EnableLiveMigration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableLiveMigration","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-11-10T23:52:32.1936461Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableStopMigrateForSub","name":"Microsoft.Compute/Fabric.EnableStopMigrateForSub","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableStopMigrateForSub","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-12-17T21:57:25.5505713Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableStopMigrateDiskCopyForTenant","name":"Microsoft.Compute/Fabric.EnableStopMigrateDiskCopyForTenant","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableStopMigrateDiskCopyForTenant","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-10-10T23:38:25.8291167Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableTenantLeaseOperationsOnNode","name":"Microsoft.Compute/Fabric.EnableTenantLeaseOperationsOnNode","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableTenantLeaseOperationsOnNode","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-22T22:43:50.1391276Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableStopMigrateGen","name":"Microsoft.Compute/Fabric.EnableStopMigrateGen","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableStopMigrateGen","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-09-24T21:55:08.9237122Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.StopMigrateSkipDiskCopyForSub","name":"Microsoft.Compute/Fabric.StopMigrateSkipDiskCopyForSub","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.StopMigrateSkipDiskCopyForSub","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-12-17T22:10:59.3364161Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.EnableVMFaultInjectorForTenant","name":"Microsoft.Compute/Fabric.EnableVMFaultInjectorForTenant","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.EnableVMFaultInjectorForTenant","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-03-20T17:26:37.8282134Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Fabric.VMPreprovisioning","name":"Microsoft.Compute/Fabric.VMPreprovisioning","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.VMPreprovisioning","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-09-15T20:56:38.8226759Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.compute/subscriptionFeatureRegistrations/Fabric.UDWithinFDAlignment","name":"Microsoft.compute/Fabric.UDWithinFDAlignment","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Fabric.UDWithinFDAlignment","providerNamespace":"Microsoft.compute","state":"NotRegistered","releaseDate":"2018-02-12T23:29:52.7982248Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/FastPollingOptIn","name":"Microsoft.Compute/FastPollingOptIn","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"FastPollingOptIn","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-09-24T04:47:44.3784558Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Feature.AllowUnhealthyNode","name":"Microsoft.Compute/Feature.AllowUnhealthyNode","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Feature.AllowUnhealthyNode","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-10T19:30:38.8050471Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Feature.EnableCustomizedTenantLiveMigration","name":"Microsoft.Compute/Feature.EnableCustomizedTenantLiveMigration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Feature.EnableCustomizedTenantLiveMigration","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-01T22:48:44.9082484Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Feature.DisableServiceHealing","name":"Microsoft.Compute/Feature.DisableServiceHealing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Feature.DisableServiceHealing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-10T19:29:57.6632568Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/Foobar","name":"Microsoft.Compute/Foobar","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Foobar","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-04-20T00:20:05.5686748Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/GalleryImageBigBlob","name":"Microsoft.Compute/GalleryImageBigBlob","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GalleryImageBigBlob","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-08-29T01:02:06.1002039Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/GalleryApplicationPreview","name":"Microsoft.Compute/GalleryApplicationPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GalleryApplicationPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-05-14T22:16:39.8365655Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/GalleryImageHighScale","name":"Microsoft.Compute/GalleryImageHighScale","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GalleryImageHighScale","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-08-17T20:42:53.530967Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/GalleryPreview","name":"Microsoft.Compute/GalleryPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GalleryPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-02-28T05:43:04.6467885Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/GalleryRemoveUserSourceDependency","name":"Microsoft.Compute/GalleryRemoveUserSourceDependency","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GalleryRemoveUserSourceDependency","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-09-17T19:30:11.3041012Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ImpedeFastPolling","name":"Microsoft.Compute/ImpedeFastPolling","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ImpedeFastPolling","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-10-04T10:50:07.043504Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/InGuestPatchVMPreview","name":"Microsoft.Compute/InGuestPatchVMPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"InGuestPatchVMPreview","displayName":"On-demand
         VM guest patching preview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-11-07T01:27:13.4642098Z","description":"Allows
-        subscription to perform in-guest patching of IaaS VMs","approvalType":"AutoApproval","documentationLink":"https://docs.microsoft.com/en-us/azure/virtual-machines/windows/automatic-vm-guest-patching","shouldFeatureDisplayInPortal":true}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/IncrementalSnapshots","name":"Microsoft.Compute/IncrementalSnapshots","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IncrementalSnapshots","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-01-17T02:26:14.3349612Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/InGuestVMUpdate","name":"Microsoft.Compute/InGuestVMUpdate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"InGuestVMUpdate","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-12-07T19:35:59.588841Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/LocalDiffDiskPreview","name":"Microsoft.Compute/LocalDiffDiskPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"LocalDiffDiskPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-10-19T18:00:42.6058274Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/lowprioritysinglevm","name":"Microsoft.Compute/lowprioritysinglevm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"lowprioritysinglevm","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-03-15T22:51:45.1701945Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ManagedDisksPreview","name":"Microsoft.Compute/ManagedDisksPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ManagedDisksPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-03-10T00:54:13.2476486Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ManagedResourcesMove","name":"Microsoft.Compute/ManagedResourcesMove","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ManagedResourcesMove","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-05-01T23:46:42.6006833Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/MRProfile","name":"Microsoft.Compute/MRProfile","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"MRProfile","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-26T21:49:32.0048541Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.compute/subscriptionFeatureRegistrations/MultipleAvailabilityZones","name":"microsoft.compute/MultipleAvailabilityZones","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"MultipleAvailabilityZones","providerNamespace":"microsoft.compute","state":"NotRegistered","releaseDate":"2017-04-14T18:50:14.3195296Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/NetworkPlacementGroupsPreview","name":"Microsoft.Compute/NetworkPlacementGroupsPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NetworkPlacementGroupsPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-07-24T06:27:35.9169862Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/NewAllocator","name":"Microsoft.Compute/NewAllocator","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NewAllocator","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-07-30T00:27:49.6359366Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/NodeFlight","name":"Microsoft.Compute/NodeFlight","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NodeFlight","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2015-10-15T18:16:39.4778128Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OptOutScaleSetPipelinePreemption","name":"Microsoft.Compute/OptOutScaleSetPipelinePreemption","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OptOutScaleSetPipelinePreemption","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-10T00:50:13.8286184Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OSUpgradeForServiceFabric","name":"Microsoft.Compute/OSUpgradeForServiceFabric","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OSUpgradeForServiceFabric","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-07-08T00:33:07.1828673Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.compute/subscriptionFeatureRegistrations/OverProvision","name":"microsoft.compute/OverProvision","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvision","providerNamespace":"microsoft.compute","state":"NotRegistered","releaseDate":"2016-01-28T00:00:49.0140394Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverprovisionedExtensionDelay","name":"Microsoft.Compute/OverprovisionedExtensionDelay","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverprovisionedExtensionDelay","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-02-13T19:07:48.0477403Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverProvisionWithUDBalance","name":"Microsoft.Compute/OverProvisionWithUDBalance","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvisionWithUDBalance","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-11-11T19:22:46.4517019Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverProvisionWithFDBalancing","name":"Microsoft.Compute/OverProvisionWithFDBalancing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvisionWithFDBalancing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-10-07T21:37:48.5684392Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverProvisionWithUDBalancing","name":"Microsoft.Compute/OverProvisionWithUDBalancing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvisionWithUDBalancing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-10-07T21:38:47.8453547Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/PerfTestSubscription","name":"Microsoft.Compute/PerfTestSubscription","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PerfTestSubscription","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-08-22T19:21:24.0238043Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ProximityPlacementGroupsPreview","name":"Microsoft.Compute/ProximityPlacementGroupsPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ProximityPlacementGroupsPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-11-13T11:20:39.2879288Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/RegionalUltraSSDVMs","name":"Microsoft.Compute/RegionalUltraSSDVMs","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RegionalUltraSSDVMs","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-30T17:49:29.5345127Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/RepairVMScaleSetInstancesPreview","name":"Microsoft.Compute/RepairVMScaleSetInstancesPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RepairVMScaleSetInstancesPreview","displayName":"Automatic
+        subscription to perform in-guest patching of IaaS VMs","approvalType":"AutoApproval","documentationLink":"https://learn.microsoft.com/en-us/azure/virtual-machines/windows/automatic-vm-guest-patching","shouldFeatureDisplayInPortal":true}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/IncrementalSnapshots","name":"Microsoft.Compute/IncrementalSnapshots","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IncrementalSnapshots","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-01-17T02:26:14.3349612Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/InGuestVMUpdate","name":"Microsoft.Compute/InGuestVMUpdate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"InGuestVMUpdate","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-12-07T19:35:59.588841Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/LocalDiffDiskPreview","name":"Microsoft.Compute/LocalDiffDiskPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"LocalDiffDiskPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-10-19T18:00:42.6058274Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/lowprioritysinglevm","name":"Microsoft.Compute/lowprioritysinglevm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"lowprioritysinglevm","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-03-15T22:51:45.1701945Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ManagedDisksPreview","name":"Microsoft.Compute/ManagedDisksPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ManagedDisksPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-03-10T00:54:13.2476486Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ManagedResourcesMove","name":"Microsoft.Compute/ManagedResourcesMove","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ManagedResourcesMove","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-05-01T23:46:42.6006833Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/MRProfile","name":"Microsoft.Compute/MRProfile","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"MRProfile","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-26T21:49:32.0048541Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.compute/subscriptionFeatureRegistrations/MultipleAvailabilityZones","name":"microsoft.compute/MultipleAvailabilityZones","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"MultipleAvailabilityZones","providerNamespace":"microsoft.compute","state":"NotRegistered","releaseDate":"2017-04-14T18:50:14.3195296Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/NetworkPlacementGroupsPreview","name":"Microsoft.Compute/NetworkPlacementGroupsPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NetworkPlacementGroupsPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-07-24T06:27:35.9169862Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/NewAllocator","name":"Microsoft.Compute/NewAllocator","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NewAllocator","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-07-30T00:27:49.6359366Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/NodeFlight","name":"Microsoft.Compute/NodeFlight","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NodeFlight","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2015-10-15T18:16:39.4778128Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OptOutScaleSetPipelinePreemption","name":"Microsoft.Compute/OptOutScaleSetPipelinePreemption","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OptOutScaleSetPipelinePreemption","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-03-10T00:50:13.8286184Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OSUpgradeForServiceFabric","name":"Microsoft.Compute/OSUpgradeForServiceFabric","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OSUpgradeForServiceFabric","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-07-08T00:33:07.1828673Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.compute/subscriptionFeatureRegistrations/OverProvision","name":"microsoft.compute/OverProvision","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvision","providerNamespace":"microsoft.compute","state":"NotRegistered","releaseDate":"2016-01-28T00:00:49.0140394Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverprovisionedExtensionDelay","name":"Microsoft.Compute/OverprovisionedExtensionDelay","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverprovisionedExtensionDelay","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-02-13T19:07:48.0477403Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverProvisionWithUDBalance","name":"Microsoft.Compute/OverProvisionWithUDBalance","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvisionWithUDBalance","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-11-11T19:22:46.4517019Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverProvisionWithFDBalancing","name":"Microsoft.Compute/OverProvisionWithFDBalancing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvisionWithFDBalancing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-10-07T21:37:48.5684392Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/OverProvisionWithUDBalancing","name":"Microsoft.Compute/OverProvisionWithUDBalancing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"OverProvisionWithUDBalancing","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2016-10-07T21:38:47.8453547Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/PerfTestSubscription","name":"Microsoft.Compute/PerfTestSubscription","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PerfTestSubscription","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2017-08-22T19:21:24.0238043Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/ProximityPlacementGroupsPreview","name":"Microsoft.Compute/ProximityPlacementGroupsPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ProximityPlacementGroupsPreview","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2018-11-13T11:20:39.2879288Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/RegionalUltraSSDVMs","name":"Microsoft.Compute/RegionalUltraSSDVMs","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RegionalUltraSSDVMs","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-30T17:49:29.5345127Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/RepairVMScaleSetInstancesPreview","name":"Microsoft.Compute/RepairVMScaleSetInstancesPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RepairVMScaleSetInstancesPreview","displayName":"Automatic
         Repairs on Virtual Machine Scale Sets","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2019-10-03T21:38:45.4236546Z","description":"Enable
         Automatic Repairs feature on Virtual Machine Scale Sets. This preview feature
         is provided without a service level agreement, and it''s not recommended for
@@ -31,14 +31,14 @@ interactions:
         flag to enable sourceControlConfiguration feature, for use in K8s clusters","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Kusto/subscriptionFeatureRegistrations/AllowSwitzerlandNorth","name":"Microsoft.Kusto/AllowSwitzerlandNorth","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowSwitzerlandNorth","providerNamespace":"Microsoft.Kusto","state":"NotRegistered","releaseDate":"2019-10-03T07:37:22.7377956Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Kusto/subscriptionFeatureRegistrations/UseSharedIdentities","name":"Microsoft.Kusto/UseSharedIdentities","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"UseSharedIdentities","providerNamespace":"Microsoft.Kusto","state":"NotRegistered","releaseDate":"2019-09-02T12:34:34.3271486Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.LabServices/subscriptionFeatureRegistrations/DevInProdIntegration","name":"Microsoft.LabServices/DevInProdIntegration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DevInProdIntegration","displayName":"Use
         DEV instance of LabServices Resource Provider","providerNamespace":"Microsoft.LabServices","state":"NotRegistered","releaseDate":"2018-02-16T01:41:28.1680235Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/AllowCrossSubscriptionGatewayAccess","name":"Microsoft.Logic/AllowCrossSubscriptionGatewayAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCrossSubscriptionGatewayAccess","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2019-03-15T02:12:24.9572965Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/AmeProjectionEnabled","name":"Microsoft.Logic/AmeProjectionEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AmeProjectionEnabled","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2019-07-12T02:14:27.253996Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/AllowUnlimitedLogicApps","name":"Microsoft.Logic/AllowUnlimitedLogicApps","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowUnlimitedLogicApps","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2018-11-12T23:57:38.6997682Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/FairfaxDemo","name":"Microsoft.Logic/FairfaxDemo","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"FairfaxDemo","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2018-01-24T19:24:25.6956106Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/HostingEnvironmentsPreview","name":"Microsoft.Logic/HostingEnvironmentsPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"HostingEnvironmentsPreview","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2018-01-24T20:49:43.0947701Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/IsolatedEnvironmentsPreview","name":"Microsoft.Logic/IsolatedEnvironmentsPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IsolatedEnvironmentsPreview","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2018-03-01T19:47:10.8622987Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/IsolatedEnvironmentsPrivateRegions","name":"Microsoft.Logic/IsolatedEnvironmentsPrivateRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IsolatedEnvironmentsPrivateRegions","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2019-10-29T16:25:50.3339728Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Logic/subscriptionFeatureRegistrations/IsolatedEnvironmentsPreviewDisable","name":"Microsoft.Logic/IsolatedEnvironmentsPreviewDisable","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IsolatedEnvironmentsPreviewDisable","providerNamespace":"Microsoft.Logic","state":"NotRegistered","releaseDate":"2018-12-05T20:35:03.9224678Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.MachineLearningCompute/subscriptionFeatureRegistrations/ViennaPublicPreview","name":"Microsoft.MachineLearningCompute/ViennaPublicPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ViennaPublicPreview","providerNamespace":"Microsoft.MachineLearningCompute","state":"NotRegistered","releaseDate":"2017-07-12T15:54:04.3145142Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.MachineLearningExperimentation/subscriptionFeatureRegistrations/CanaryFeature","name":"Microsoft.MachineLearningExperimentation/CanaryFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CanaryFeature","providerNamespace":"Microsoft.MachineLearningExperimentation","state":"NotRegistered","releaseDate":"2017-06-01T01:52:54.6110614Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Maintenance/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.Maintenance/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.Maintenance","state":"NotRegistered","releaseDate":"2018-07-16T23:16:20.1435648Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ManagedIdentity/subscriptionFeatureRegistrations/EnableSecurityGroups","name":"Microsoft.ManagedIdentity/EnableSecurityGroups","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableSecurityGroups","displayName":"EnableSecurityGroups","providerNamespace":"Microsoft.ManagedIdentity","state":"NotRegistered","releaseDate":"2016-07-28T23:34:10.9959397Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ManagedNetwork/subscriptionFeatureRegistrations/mncbetaAccess","name":"Microsoft.ManagedNetwork/mncbetaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"mncbetaAccess","providerNamespace":"Microsoft.ManagedNetwork","state":"NotRegistered","releaseDate":"2019-08-13T17:51:04.884219Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Microsoft/subscriptionFeatureRegistrations/AllowNetworkWatcherAzureReachabilityReport","name":"Microsoft.Microsoft/AllowNetworkWatcherAzureReachabilityReport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetworkWatcherAzureReachabilityReport","providerNamespace":"Microsoft.Microsoft","state":"NotRegistered","releaseDate":"2017-11-06T23:24:23.4197469Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Mindaro/subscriptionFeatureRegistrations/tip2","name":"Microsoft.Mindaro/tip2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"tip2","providerNamespace":"Microsoft.Mindaro","state":"NotRegistered","releaseDate":"2016-09-07T20:41:28.9884703Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Mindaro/subscriptionFeatureRegistrations/tip","name":"Microsoft.Mindaro/tip","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"tip","providerNamespace":"Microsoft.Mindaro","state":"NotRegistered","releaseDate":"2016-09-06T17:57:22.6899268Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/AllowSMB","name":"Microsoft.NetApp/AllowSMB","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowSMB","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-02-26T20:38:32.8513057Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/AllowValidationRegions","name":"Microsoft.NetApp/AllowValidationRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowValidationRegions","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-01-28T02:46:10.5955714Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/PlatformSettingsOverride","name":"Microsoft.Compute/PlatformSettingsOverride","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PlatformSettingsOverride","displayName":"","providerNamespace":"Microsoft.Compute","state":"Registered","releaseDate":"2018-04-12T18:24:31.8557247Z","description":"","approvalType":"AutoApproval","documentationLink":"","registrationDate":"2021-01-20T01:00:11.8476445Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Contoso/subscriptionFeatureRegistrations/RPaaSSampleApp","name":"Microsoft.Contoso/RPaaSSampleApp","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RPaaSSampleApp","providerNamespace":"Microsoft.Contoso","state":"Registered","releaseDate":"2019-10-01T01:02:51.5778546Z","approvalType":"ApprovalRequired","registrationDate":"2019-10-01T23:35:17.2783503Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.DataLakeStore/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.DataLakeStore/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.DataLakeStore","state":"Registered","releaseDate":"2015-10-19T09:03:14.4174113Z","approvalType":"ApprovalRequired","registrationDate":"2015-12-18T20:09:49.1494009Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/ANFBackupPreview","name":"Microsoft.NetApp/ANFBackupPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ANFBackupPreview","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-07-31T23:26:05.7367643Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/ANFGA","name":"Microsoft.NetApp/ANFGA","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ANFGA","displayName":"","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-05-09T12:19:27.4691138Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/ANFGATenant","name":"Microsoft.NetApp/ANFGATenant","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ANFGATenant","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-07-24T00:12:01.6792743Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/ANFNFSv4Preview","name":"Microsoft.NetApp/ANFNFSv4Preview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ANFNFSv4Preview","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-07-31T23:25:40.2323482Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/ANFReplicationPreview","name":"Microsoft.NetApp/ANFReplicationPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ANFReplicationPreview","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-07-31T23:26:14.8242511Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/ANFSnapRestorePreview","name":"Microsoft.NetApp/ANFSnapRestorePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ANFSnapRestorePreview","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-07-31T23:25:52.6023003Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/managementNicAdmin","name":"Microsoft.NetApp/managementNicAdmin","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"managementNicAdmin","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2019-01-19T15:53:09.0336852Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NetApp/subscriptionFeatureRegistrations/testing","name":"Microsoft.NetApp/testing","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"testing","providerNamespace":"Microsoft.NetApp","state":"NotRegistered","releaseDate":"2018-04-25T21:28:27.407912Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAcceleratedNetworkingFeature","name":"Microsoft.Network/AllowAcceleratedNetworkingFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAcceleratedNetworkingFeature","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-09-08T18:11:54.7782603Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAccessRuleExtendedProperties","name":"Microsoft.Network/AllowAccessRuleExtendedProperties","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAccessRuleExtendedProperties","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-05-10T16:32:00.3168099Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAcceleratedNetworkingForLinux","name":"Microsoft.Network/AllowAcceleratedNetworkingForLinux","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAcceleratedNetworkingForLinux","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-03-24T22:47:38.9086688Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAllocateOptimizations","name":"Microsoft.Network/AllowAllocateOptimizations","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAllocateOptimizations","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-30T04:23:45.0208206Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAllocateAsyncValidation","name":"Microsoft.Network/AllowAllocateAsyncValidation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAllocateAsyncValidation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-10-08T05:14:55.3429839Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAppGwWafBotManagerRuleSet","name":"Microsoft.Network/AllowAppGwWafBotManagerRuleSet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAppGwWafBotManagerRuleSet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-25T00:19:44.0046666Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAppGwPerSiteFirewallPolicy","name":"Microsoft.Network/AllowAppGwPerSiteFirewallPolicy","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAppGwPerSiteFirewallPolicy","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-25T00:19:30.662039Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowApplicationGatewayClientAuthentication","name":"Microsoft.Network/AllowApplicationGatewayClientAuthentication","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowApplicationGatewayClientAuthentication","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-21T17:40:08.2024235Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAppGwWafCustomRuleGeoMatch","name":"Microsoft.Network/AllowAppGwWafCustomRuleGeoMatch","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAppGwWafCustomRuleGeoMatch","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-25T00:18:58.1014947Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowApplicationGatewayLoadDistributionPolicy","name":"Microsoft.Network/AllowApplicationGatewayLoadDistributionPolicy","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowApplicationGatewayLoadDistributionPolicy","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-30T23:53:05.3531028Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowApplicationGatewayV2WildcardListener","name":"Microsoft.Network/AllowApplicationGatewayV2WildcardListener","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowApplicationGatewayV2WildcardListener","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-21T06:16:05.35555Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowApplicationSecurityGroups","name":"Microsoft.Network/AllowApplicationSecurityGroups","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowApplicationSecurityGroups","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-09-01T03:11:07.0293445Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowApplicationGatewayZonePinning","name":"Microsoft.Network/AllowApplicationGatewayZonePinning","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowApplicationGatewayZonePinning","displayName":"AllowApplicationGatewayZonePinning","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-08-28T17:52:09.157174Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAzureFirewall","name":"Microsoft.Network/AllowAzureFirewall","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAzureFirewall","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-05-31T20:33:30.5465419Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowAsgsOnVmScaleSet","name":"Microsoft.Network/AllowAsgsOnVmScaleSet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowAsgsOnVmScaleSet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-01-31T23:00:00.5095821Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowBaremetalServers","name":"Microsoft.Network/AllowBaremetalServers","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowBaremetalServers","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-01T01:31:33.9491668Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowBastionHostPrivatePreview","name":"Microsoft.Network/AllowBastionHostPrivatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowBastionHostPrivatePreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-06-19T00:21:41.3811283Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowBastionHost","name":"Microsoft.Network/AllowBastionHost","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowBastionHost","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-21T23:09:13.2183816Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowClassicCrossSubscriptionPeering","name":"Microsoft.Network/AllowClassicCrossSubscriptionPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowClassicCrossSubscriptionPeering","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-01-30T22:57:23.311492Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowBringYourOwnPublicIpAddress","name":"Microsoft.Network/AllowBringYourOwnPublicIpAddress","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowBringYourOwnPublicIpAddress","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-11-21T23:48:39.3754823Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowCoExistenceAnyOrder","name":"Microsoft.Network/AllowCoExistenceAnyOrder","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCoExistenceAnyOrder","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-03-16T19:33:21.4273705Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowCortexExpressRouteGateway","name":"Microsoft.Network/AllowCortexExpressRouteGateway","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCortexExpressRouteGateway","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-10T21:20:28.4625345Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowCortexGlobalVnetPeering","name":"Microsoft.Network/AllowCortexGlobalVnetPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCortexGlobalVnetPeering","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-06-10T18:40:02.2191887Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowCortexSecurity","name":"Microsoft.Network/AllowCortexSecurity","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCortexSecurity","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-04-09T17:15:16.0042223Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowDdosProtectionPlan","name":"Microsoft.Network/AllowDdosProtectionPlan","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDdosProtectionPlan","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-02-05T23:53:26.2943669Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowDisableBgpRouteProgagation","name":"Microsoft.Network/AllowDisableBgpRouteProgagation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDisableBgpRouteProgagation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-11-03T17:32:25.0662187Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowDestinationServiceEndpoints","name":"Microsoft.Network/AllowDestinationServiceEndpoints","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDestinationServiceEndpoints","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-01-16T16:40:33.4696266Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowDSeriesForBrooklyn","name":"Microsoft.Network/AllowDSeriesForBrooklyn","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDSeriesForBrooklyn","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-05-16T00:25:45.264263Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.network/subscriptionFeatureRegistrations/allowERArmProviderPortal","name":"microsoft.network/allowERArmProviderPortal","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"allowERArmProviderPortal","providerNamespace":"microsoft.network","state":"NotRegistered","releaseDate":"2019-04-15T07:07:58.5583611Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowDynamicRedirectToTestGwm","name":"Microsoft.Network/AllowDynamicRedirectToTestGwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDynamicRedirectToTestGwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-25T02:19:13.9933395Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowExpressRoutePorts","name":"Microsoft.Network/AllowExpressRoutePorts","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowExpressRoutePorts","displayName":"Allow
         ExpressRoute Direct","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-01T21:33:32.5104635Z","description":"Allow
-        ExpressRoute Direct for this subscription","approvalType":"AutoApproval","documentationLink":"https://docs.microsoft.com/azure/expressroute/expressroute-erdirect-about","shouldFeatureDisplayInPortal":true}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowExRCrossRegionResourceValidation","name":"Microsoft.Network/AllowExRCrossRegionResourceValidation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowExRCrossRegionResourceValidation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-28T23:14:58.4130366Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowFpgaEnabledClustersFeature","name":"Microsoft.Network/AllowFpgaEnabledClustersFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowFpgaEnabledClustersFeature","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-08-11T02:40:32.8921358Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowFrontdoor","name":"Microsoft.Network/AllowFrontdoor","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowFrontdoor","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-05-17T05:26:54.33318Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalCrpHttpClient","name":"Microsoft.Network/AllowGlobalCrpHttpClient","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalCrpHttpClient","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-30T04:20:37.2866325Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalTagsForSql","name":"Microsoft.Network/AllowGlobalTagsForSql","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalTagsForSql","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-10T21:50:19.8503254Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalPeeringTransit","name":"Microsoft.Network/AllowGlobalPeeringTransit","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalPeeringTransit","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-07-26T18:22:20.3910381Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalVnetPeering","name":"Microsoft.Network/AllowGlobalVnetPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalVnetPeering","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-08-06T23:00:39.2513139Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalTagsForStorage","name":"Microsoft.Network/AllowGlobalTagsForStorage","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalTagsForStorage","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-10T21:53:29.8446808Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowHidingCrossSubscriptionResources","name":"Microsoft.Network/AllowHidingCrossSubscriptionResources","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowHidingCrossSubscriptionResources","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-23T21:45:17.0703774Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGRPeerConnection","name":"Microsoft.Network/AllowGRPeerConnection","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGRPeerConnection","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-10-24T22:33:59.628435Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowILBAllPortsRule","name":"Microsoft.Network/AllowILBAllPortsRule","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowILBAllPortsRule","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-03-27T23:17:27.9339834Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIntendedPolicies","name":"Microsoft.Network/AllowIntendedPolicies","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIntendedPolicies","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-03-02T03:18:08.0289724Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIntentedPolicies","name":"Microsoft.Network/AllowIntentedPolicies","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIntentedPolicies","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-02-28T19:35:48.6389591Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowInterfaceEndpoints","name":"Microsoft.Network/AllowInterfaceEndpoints","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowInterfaceEndpoints","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-15T02:05:00.3973627Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowInternalDelegations","name":"Microsoft.Network/AllowInternalDelegations","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowInternalDelegations","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-02-14T00:45:33.5777937Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpTags","name":"Microsoft.Network/AllowIpTags","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpTags","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-09T23:49:40.8584722Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpGroups","name":"Microsoft.Network/AllowIpGroups","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpGroups","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-11T00:14:42.0305335Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIPv6CAOnStandardLB","name":"Microsoft.Network/AllowIPv6CAOnStandardLB","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIPv6CAOnStandardLB","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-12-12T01:04:27.1048356Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpv6GlobalReach","name":"Microsoft.Network/AllowIpv6GlobalReach","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpv6GlobalReach","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-18T10:09:03.3950985Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpv6PrivatePeering","name":"Microsoft.Network/AllowIpv6PrivatePeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpv6PrivatePeering","displayName":"Allow
+        ExpressRoute Direct for this subscription","approvalType":"AutoApproval","documentationLink":"https://learn.microsoft.com/azure/expressroute/expressroute-erdirect-about","shouldFeatureDisplayInPortal":true}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowExRCrossRegionResourceValidation","name":"Microsoft.Network/AllowExRCrossRegionResourceValidation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowExRCrossRegionResourceValidation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-28T23:14:58.4130366Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowFpgaEnabledClustersFeature","name":"Microsoft.Network/AllowFpgaEnabledClustersFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowFpgaEnabledClustersFeature","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-08-11T02:40:32.8921358Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowFrontdoor","name":"Microsoft.Network/AllowFrontdoor","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowFrontdoor","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-05-17T05:26:54.33318Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalCrpHttpClient","name":"Microsoft.Network/AllowGlobalCrpHttpClient","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalCrpHttpClient","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-30T04:20:37.2866325Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalTagsForSql","name":"Microsoft.Network/AllowGlobalTagsForSql","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalTagsForSql","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-10T21:50:19.8503254Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalPeeringTransit","name":"Microsoft.Network/AllowGlobalPeeringTransit","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalPeeringTransit","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-07-26T18:22:20.3910381Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalVnetPeering","name":"Microsoft.Network/AllowGlobalVnetPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalVnetPeering","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-08-06T23:00:39.2513139Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGlobalTagsForStorage","name":"Microsoft.Network/AllowGlobalTagsForStorage","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalTagsForStorage","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-10T21:53:29.8446808Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowHidingCrossSubscriptionResources","name":"Microsoft.Network/AllowHidingCrossSubscriptionResources","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowHidingCrossSubscriptionResources","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-23T21:45:17.0703774Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowGRPeerConnection","name":"Microsoft.Network/AllowGRPeerConnection","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGRPeerConnection","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-10-24T22:33:59.628435Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowILBAllPortsRule","name":"Microsoft.Network/AllowILBAllPortsRule","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowILBAllPortsRule","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-03-27T23:17:27.9339834Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIntendedPolicies","name":"Microsoft.Network/AllowIntendedPolicies","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIntendedPolicies","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-03-02T03:18:08.0289724Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIntentedPolicies","name":"Microsoft.Network/AllowIntentedPolicies","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIntentedPolicies","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-02-28T19:35:48.6389591Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowInterfaceEndpoints","name":"Microsoft.Network/AllowInterfaceEndpoints","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowInterfaceEndpoints","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-15T02:05:00.3973627Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowInternalDelegations","name":"Microsoft.Network/AllowInternalDelegations","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowInternalDelegations","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-02-14T00:45:33.5777937Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpTags","name":"Microsoft.Network/AllowIpTags","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpTags","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-09T23:49:40.8584722Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpGroups","name":"Microsoft.Network/AllowIpGroups","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpGroups","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-11T00:14:42.0305335Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIPv6CAOnStandardLB","name":"Microsoft.Network/AllowIPv6CAOnStandardLB","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIPv6CAOnStandardLB","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-12-12T01:04:27.1048356Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpv6GlobalReach","name":"Microsoft.Network/AllowIpv6GlobalReach","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpv6GlobalReach","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-18T10:09:03.3950985Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIpv6PrivatePeering","name":"Microsoft.Network/AllowIpv6PrivatePeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIpv6PrivatePeering","displayName":"Allow
         Ipv6 Private Peering","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-10-09T07:54:31.5049264Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowIPv6VirtualNetwork","name":"Microsoft.Network/AllowIPv6VirtualNetwork","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowIPv6VirtualNetwork","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-10-18T19:07:43.9131423Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowLBPreview","name":"Microsoft.Network/AllowLBPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowLBPreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-08-17T21:39:18.0538346Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowLBPreviewWave2","name":"Microsoft.Network/AllowLBPreviewWave2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowLBPreviewWave2","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-10-16T21:22:22.0882808Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowLBPreviewWave3","name":"Microsoft.Network/AllowLBPreviewWave3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowLBPreviewWave3","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-10-16T21:23:45.0418871Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowLBSNATallocationPolicy","name":"Microsoft.Network/AllowLBSNATallocationPolicy","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowLBSNATallocationPolicy","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-23T18:29:42.6797433Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowLoadBalancingOnSecondaryIpConfigs","name":"Microsoft.Network/AllowLoadBalancingOnSecondaryIpConfigs","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowLoadBalancingOnSecondaryIpConfigs","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-08-20T07:27:12.3310774Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowMacPreservation","name":"Microsoft.Network/AllowMacPreservation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowMacPreservation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-06-15T00:30:15.6476367Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowMaxPrivateLinkServicesPerLoadBalancerOptimization","name":"Microsoft.Network/AllowMaxPrivateLinkServicesPerLoadBalancerOptimization","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowMaxPrivateLinkServicesPerLoadBalancerOptimization","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-09T00:31:04.9884429Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowMultiNicOnVMScaleSet","name":"Microsoft.Network/AllowMultiNicOnVMScaleSet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowMultiNicOnVMScaleSet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-05-19T00:27:43.6342697Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowMultipleAddressPrefixesOnSubnet","name":"Microsoft.Network/AllowMultipleAddressPrefixesOnSubnet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowMultipleAddressPrefixesOnSubnet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-07-09T07:18:18.3853425Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowMultipleIpConfigurationsPerNic","name":"Microsoft.Network/AllowMultipleIpConfigurationsPerNic","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowMultipleIpConfigurationsPerNic","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-12-09T02:25:11.0908887Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowMutipleAddressPrefixesOnSubnet","name":"Microsoft.Network/AllowMutipleAddressPrefixesOnSubnet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowMutipleAddressPrefixesOnSubnet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-07-09T07:44:05.1306109Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNatGateway","name":"Microsoft.Network/AllowNatGateway","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNatGateway","displayName":"","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-11-14T21:18:58.3499172Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNetwatcherAzureReachabilityReport","name":"Microsoft.Network/AllowNetwatcherAzureReachabilityReport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetwatcherAzureReachabilityReport","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-07-31T16:25:02.3788042Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNetworkIntentPolicies","name":"Microsoft.Network/AllowNetworkIntentPolicies","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetworkIntentPolicies","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-03T00:05:41.8474579Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNetworkProfiles","name":"Microsoft.Network/AllowNetworkProfiles","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetworkProfiles","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-05-10T23:17:37.5624072Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNetworkWatcher","name":"Microsoft.Network/AllowNetworkWatcher","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetworkWatcher","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-05-04T00:45:30.1063463Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNetworkWatcherAzureReachabilityReport","name":"Microsoft.Network/AllowNetworkWatcherAzureReachabilityReport","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetworkWatcherAzureReachabilityReport","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-07-31T16:31:07.6340505Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNetworkWatcherConnectivityCheck","name":"Microsoft.Network/AllowNetworkWatcherConnectivityCheck","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNetworkWatcherConnectivityCheck","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-04-25T21:31:16.5548644Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNfvrpFirewallPolicyPrivate","name":"Microsoft.Network/AllowNfvrpFirewallPolicyPrivate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNfvrpFirewallPolicyPrivate","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-06-19T00:20:36.2242167Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNfvrpFirewallPolicySlice","name":"Microsoft.Network/AllowNfvrpFirewallPolicySlice","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNfvrpFirewallPolicySlice","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-06-19T00:21:11.1490617Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNfvrpFirewallPolicyValidation","name":"Microsoft.Network/AllowNfvrpFirewallPolicyValidation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNfvrpFirewallPolicyValidation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-06-19T00:21:02.0429758Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNfvrpResourcePreview","name":"Microsoft.Network/AllowNfvrpResourcePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNfvrpResourcePreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-08-27T19:37:18.5961685Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowNfvrpVirtualRouterSlice","name":"Microsoft.Network/AllowNfvrpVirtualRouterSlice","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowNfvrpVirtualRouterSlice","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-08-27T19:37:10.8996083Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowOutboundNatRule","name":"Microsoft.Network/AllowOutboundNatRule","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowOutboundNatRule","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-10-27T00:53:14.8313594Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowP2SCortexAccess","name":"Microsoft.Network/AllowP2SCortexAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowP2SCortexAccess","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-09T00:26:11.9169439Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPaaSEndpointAcl","name":"Microsoft.Network/AllowPaaSEndpointAcl","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPaaSEndpointAcl","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-04-25T21:14:04.9649625Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPingMesh","name":"Microsoft.Network/AllowPingMesh","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPingMesh","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-18T21:10:03.7093383Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPreflightValidation","name":"Microsoft.Network/AllowPreflightValidation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPreflightValidation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-02-29T23:10:04.116609Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPrepareNetworkPoliciesAction","name":"Microsoft.Network/AllowPrepareNetworkPoliciesAction","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPrepareNetworkPoliciesAction","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-03-13T17:58:05.1759253Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPreReleaseRegions","name":"Microsoft.Network/AllowPreReleaseRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPreReleaseRegions","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-05-28T16:20:44.1586363Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPrivateAccess","name":"Microsoft.Network/AllowPrivateAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPrivateAccess","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-30T23:52:57.0031346Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPrivateEndpoints","name":"Microsoft.Network/AllowPrivateEndpoints","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPrivateEndpoints","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-02-16T02:41:29.838097Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPrivateLinkServices","name":"Microsoft.Network/AllowPrivateLinkServices","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPrivateLinkServices","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-12-01T20:23:16.9981485Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPseudoClientAppId","name":"Microsoft.Network/AllowPseudoClientAppId","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPseudoClientAppId","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-09T22:12:51.7494563Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPublicIpMobility","name":"Microsoft.Network/AllowPublicIpMobility","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPublicIpMobility","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-06-21T00:31:42.2048336Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPublicIPOnVMScaleSetVMs","name":"Microsoft.Network/AllowPublicIPOnVMScaleSetVMs","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPublicIPOnVMScaleSetVMs","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-02-08T18:56:43.6602263Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPublicIpPrefix","name":"Microsoft.Network/AllowPublicIpPrefix","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPublicIpPrefix","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-19T00:27:02.3476892Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet","name":"Microsoft.Network/AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPublicIpsAndLoadBalancingOnSecondaryIpConfigsInVMScaleSet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-05-04T20:16:39.3326209Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm","name":"Microsoft.Network/AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToApplicationGatewayBvt1Gwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-07-19T17:56:24.4349605Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToExpressRouteBvt2Gwm","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteBvt2Gwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToExpressRouteBvt2Gwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-17T02:20:22.4371429Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToExpressRouteBvt3Gwm","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteBvt3Gwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToExpressRouteBvt3Gwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-17T20:42:11.8027332Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToExpressRouteCPGwm","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteCPGwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToExpressRouteCPGwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-17T20:43:51.7800089Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToExpressRouteDPGwm","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteDPGwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToExpressRouteDPGwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-17T20:43:23.7060988Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToExpressRouteMXGwm","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteMXGwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToExpressRouteMXGwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-09-10T22:39:23.2262895Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectGwmCallsToExpressRouteRSGwm","name":"Microsoft.Network/AllowRedirectGwmCallsToExpressRouteRSGwm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectGwmCallsToExpressRouteRSGwm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-08-17T20:42:51.8640238Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRedirectMaps","name":"Microsoft.Network/AllowRedirectMaps","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRedirectMaps","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-09-28T23:25:34.4358558Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRegionalGatewayManagerForSecureGateway","name":"Microsoft.Network/AllowRegionalGatewayManagerForSecureGateway","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRegionalGatewayManagerForSecureGateway","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-05-23T21:32:28.3742724Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRegionalVMSSVirtualNetworkGateway","name":"Microsoft.Network/AllowRegionalVMSSVirtualNetworkGateway","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRegionalVMSSVirtualNetworkGateway","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-28T00:52:38.4539909Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRouteServiceAccess","name":"Microsoft.Network/AllowRouteServiceAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRouteServiceAccess","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-03-28T21:14:35.3373559Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRouteTables","name":"Microsoft.Network/AllowRouteTables","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRouteTables","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-07-09T18:47:36.9826418Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRoutingPreferenceFeature","name":"Microsoft.Network/AllowRoutingPreferenceFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRoutingPreferenceFeature","displayName":"Allow
         subscriptions to use routing preference feature","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-06-13T19:57:29.5692611Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowRPGateway","name":"Microsoft.Network/AllowRPGateway","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowRPGateway","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-09T21:10:08.1878855Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowSecureVnets","name":"Microsoft.Network/AllowSecureVnets","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowSecureVnets","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-07-22T01:17:01.3700737Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowServiceEndpointPolicies","name":"Microsoft.Network/AllowServiceEndpointPolicies","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowServiceEndpointPolicies","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-01-09T09:13:47.0046864Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowSingleNicAndMultiNicInSameAvailabilitySet","name":"Microsoft.Network/AllowSingleNicAndMultiNicInSameAvailabilitySet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowSingleNicAndMultiNicInSameAvailabilitySet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-01-24T18:59:54.8988008Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowStandardLBOutboundRulesPreview","name":"Microsoft.Network/AllowStandardLBOutboundRulesPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowStandardLBOutboundRulesPreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-02T22:41:15.8612194Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowStaticPublicIpAsInstanceIp","name":"Microsoft.Network/AllowStaticPublicIpAsInstanceIp","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowStaticPublicIpAsInstanceIp","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-12-04T20:28:53.8845336Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowSubnetDelegation","name":"Microsoft.Network/AllowSubnetDelegation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowSubnetDelegation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-03-29T23:55:01.3626238Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowSubscriptionMigration","name":"Microsoft.Network/AllowSubscriptionMigration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowSubscriptionMigration","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-11-02T21:06:24.539181Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowThrottleCrpOperations","name":"Microsoft.Network/AllowThrottleCrpOperations","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowThrottleCrpOperations","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-21T22:01:46.2012935Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowValidationRegions","name":"Microsoft.Network/AllowValidationRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowValidationRegions","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-05-28T16:24:13.3609021Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVirtualNetworkTap","name":"Microsoft.Network/AllowVirtualNetworkTap","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVirtualNetworkTap","displayName":"","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-07-31T00:23:20.0819063Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVMsFromDifferentVnetsOnAvailabilitySet","name":"Microsoft.Network/AllowVMsFromDifferentVnetsOnAvailabilitySet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVMsFromDifferentVnetsOnAvailabilitySet","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-18T17:03:51.7773502Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVMSSVirtualNetworkGateway","name":"Microsoft.Network/AllowVMSSVirtualNetworkGateway","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVMSSVirtualNetworkGateway","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-11-10T23:16:44.6014208Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVmssHealthProbe","name":"Microsoft.Network/AllowVmssHealthProbe","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVmssHealthProbe","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-04-27T22:07:07.0383261Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVnetGatewayOpenVpnProtocol","name":"Microsoft.Network/AllowVnetGatewayOpenVpnProtocol","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVnetGatewayOpenVpnProtocol","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-06T18:26:23.9752015Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.network/subscriptionFeatureRegistrations/AllowVpnclientIpsecPoliciesSet","name":"microsoft.network/AllowVpnclientIpsecPoliciesSet","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVpnclientIpsecPoliciesSet","providerNamespace":"microsoft.network","state":"NotRegistered","releaseDate":"2017-12-23T00:48:18.1702125Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/armApiPreviewAccess","name":"Microsoft.Network/armApiPreviewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"armApiPreviewAccess","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2014-11-22T00:42:47.2067987Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/azurednspreview","name":"Microsoft.Network/azurednspreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"azurednspreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-04-14T12:57:37.5099141Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/CloudDnsAliasPortalTest","name":"Microsoft.Network/CloudDnsAliasPortalTest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CloudDnsAliasPortalTest","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-27T01:55:32.1491038Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/CloudDnsBdmProd","name":"Microsoft.Network/CloudDnsBdmProd","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CloudDnsBdmProd","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-16T00:20:35.588381Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/CloudDnsBdmPreview","name":"Microsoft.Network/CloudDnsBdmPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CloudDnsBdmPreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-03-12T21:24:31.7162522Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/CloudDnsReleaseCandidate","name":"Microsoft.Network/CloudDnsReleaseCandidate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CloudDnsReleaseCandidate","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2015-12-23T17:09:57.8298299Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/DisableNetworkWatcherAutocreation","name":"Microsoft.Network/DisableNetworkWatcherAutocreation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DisableNetworkWatcherAutocreation","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-10-19T05:22:12.5247972Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/CloudDnsThrottling","name":"Microsoft.Network/CloudDnsThrottling","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CloudDnsThrottling","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-06-06T19:26:26.805893Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/EnableDdosProtectionPlanBilling","name":"Microsoft.Network/EnableDdosProtectionPlanBilling","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableDdosProtectionPlanBilling","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-02-20T03:51:21.8119566Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/EnableOperationBatching","name":"Microsoft.Network/EnableOperationBatching","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableOperationBatching","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-10-08T23:15:14.0483261Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/EnableTenantNoSyncLock","name":"Microsoft.Network/EnableTenantNoSyncLock","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableTenantNoSyncLock","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-02-13T04:39:28.4518466Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/EnableTenantOperationBatching","name":"Microsoft.Network/EnableTenantOperationBatching","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableTenantOperationBatching","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-01-25T20:50:28.2018002Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/EnableValidationInBackgroundTask","name":"Microsoft.Network/EnableValidationInBackgroundTask","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EnableValidationInBackgroundTask","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-02-20T18:28:56.799359Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/HybridRegionPreview","name":"Microsoft.Network/HybridRegionPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"HybridRegionPreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-12-27T23:03:27.7905372Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/ExrGwGatewaySubscription","name":"Microsoft.Network/ExrGwGatewaySubscription","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ExrGwGatewaySubscription","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-10-27T01:55:15.6779595Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/InternetAnalyzerPreview","name":"Microsoft.Network/InternetAnalyzerPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"InternetAnalyzerPreview","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-10-25T22:09:58.0063649Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/isVMSSVirtualNetworkGatewayAllowed","name":"Microsoft.Network/isVMSSVirtualNetworkGatewayAllowed","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"isVMSSVirtualNetworkGatewayAllowed","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-12-12T21:51:36.7127759Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/PrivateDnsGcpPPE","name":"Microsoft.Network/PrivateDnsGcpPPE","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PrivateDnsGcpPPE","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-01-11T23:40:38.5288319Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/PrivateDnsGcpDaily","name":"Microsoft.Network/PrivateDnsGcpDaily","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PrivateDnsGcpDaily","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-02-05T22:16:52.1226517Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/SkipPseudoVipGeneration","name":"Microsoft.Network/SkipPseudoVipGeneration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SkipPseudoVipGeneration","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2016-03-17T18:22:18.2331393Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/SecureGwGatewaySubscription","name":"Microsoft.Network/SecureGwGatewaySubscription","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SecureGwGatewaySubscription","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2018-04-25T21:32:35.4425071Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/ThrottleArmOperationsRnm","name":"Microsoft.Network/ThrottleArmOperationsRnm","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ThrottleArmOperationsRnm","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2019-05-23T07:25:40.6311495Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/TestFlag","name":"Microsoft.Network/TestFlag","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"TestFlag","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-09-14T00:26:19.6992198Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/TrafficManagerHeatMap","name":"Microsoft.Network/TrafficManagerHeatMap","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"TrafficManagerHeatMap","providerNamespace":"Microsoft.Network","state":"NotRegistered","releaseDate":"2017-08-25T18:03:46.9830229Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Netwotk/subscriptionFeatureRegistrations/AllowGlobalPeeringTransit","name":"Microsoft.Netwotk/AllowGlobalPeeringTransit","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowGlobalPeeringTransit","providerNamespace":"Microsoft.Netwotk","state":"NotRegistered","releaseDate":"2018-10-11T21:53:17.9603347Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.NotificationHubs/subscriptionFeatureRegistrations/NHubMetrics","name":"Microsoft.NotificationHubs/NHubMetrics","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NHubMetrics","providerNamespace":"Microsoft.NotificationHubs","state":"NotRegistered","releaseDate":"2016-11-18T02:07:00.9189262Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.OperationalInsights/subscriptionFeatureRegistrations/LAClusterApiEnabled","name":"Microsoft.OperationalInsights/LAClusterApiEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"LAClusterApiEnabled","providerNamespace":"Microsoft.OperationalInsights","state":"NotRegistered","releaseDate":"2019-10-16T09:06:00.4570578Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.OperationalInsights/subscriptionFeatureRegistrations/SwitzerlandRegions","name":"Microsoft.OperationalInsights/SwitzerlandRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandRegions","providerNamespace":"Microsoft.OperationalInsights","state":"NotRegistered","releaseDate":"2019-10-16T06:42:32.9047802Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowCarrierInterconnect","name":"Microsoft.Peering/AllowCarrierInterconnect","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCarrierInterconnect","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2018-09-28T21:06:03.7894336Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowDirectInterconnect","name":"Microsoft.Peering/AllowDirectInterconnect","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDirectInterconnect","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2018-09-28T21:04:09.5207053Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowCDNInterconnect","name":"Microsoft.Peering/AllowCDNInterconnect","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCDNInterconnect","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2018-10-15T18:33:57.5122804Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowDirectPeering","name":"Microsoft.Peering/AllowDirectPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowDirectPeering","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2019-03-13T22:25:53.2318064Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowExchangeInterconnect","name":"Microsoft.Peering/AllowExchangeInterconnect","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowExchangeInterconnect","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2018-11-09T19:59:29.0161083Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowPeeringService","name":"Microsoft.Peering/AllowPeeringService","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowPeeringService","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2019-08-30T20:37:42.0469227Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Peering/subscriptionFeatureRegistrations/AllowExchangePeering","name":"Microsoft.Peering/AllowExchangePeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowExchangePeering","providerNamespace":"Microsoft.Peering","state":"NotRegistered","releaseDate":"2019-03-13T22:25:33.8466653Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.PolicyInsights/subscriptionFeatureRegistrations/AKS-DataPlaneAutoApprove","name":"Microsoft.PolicyInsights/AKS-DataPlaneAutoApprove","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AKS-DataPlaneAutoApprove","providerNamespace":"Microsoft.PolicyInsights","state":"NotRegistered","releaseDate":"2019-04-05T00:26:34.6605652Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.PolicyInsights/subscriptionFeatureRegistrations/Insights","name":"Microsoft.PolicyInsights/Insights","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Insights","providerNamespace":"Microsoft.PolicyInsights","state":"NotRegistered","releaseDate":"2017-06-30T19:46:07.0083351Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.PolicyInsights/subscriptionFeatureRegistrations/Events","name":"Microsoft.PolicyInsights/Events","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Events","providerNamespace":"Microsoft.PolicyInsights","state":"NotRegistered","releaseDate":"2017-06-30T17:47:19.046967Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.PolicyInsights/subscriptionFeatureRegistrations/States","name":"Microsoft.PolicyInsights/States","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"States","providerNamespace":"Microsoft.PolicyInsights","state":"NotRegistered","releaseDate":"2017-06-30T17:47:48.6790312Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Project/subscriptionFeatureRegistrations/tip","name":"Microsoft.Project/tip","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"tip","providerNamespace":"Microsoft.Project","state":"NotRegistered","releaseDate":"2017-05-06T00:04:12.6453592Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/32DiskBackupPreview","name":"Microsoft.RecoveryServices/32DiskBackupPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"32DiskBackupPreview","displayName":"32DiskBackupPreview","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2019-10-15T09:43:38.9114574Z","description":"32-disk
         VM backup support feature","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/AzureFileShareBackup","name":"Microsoft.RecoveryServices/AzureFileShareBackup","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AzureFileShareBackup","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2017-05-29T10:16:13.5741544Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/BackupPreview","name":"Microsoft.RecoveryServices/BackupPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"BackupPreview","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-01-26T08:46:56.2616674Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.RecoveryServices/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2015-11-02T04:51:44.0887182Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/BlockedFeature","name":"Microsoft.RecoveryServices/BlockedFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"BlockedFeature","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-02-08T06:38:19.1382391Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/CrossRegionRestore","name":"Microsoft.RecoveryServices/CrossRegionRestore","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CrossRegionRestore","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2019-11-15T07:12:13.7189493Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/HanaBackup","name":"Microsoft.RecoveryServices/HanaBackup","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"HanaBackup","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2018-04-02T14:18:30.0777714Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/InstantBackupandRecovery","name":"Microsoft.RecoveryServices/InstantBackupandRecovery","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"InstantBackupandRecovery","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-08-23T13:29:33.7381068Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/ItemLevelRecovery","name":"Microsoft.RecoveryServices/ItemLevelRecovery","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ItemLevelRecovery","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-08-05T07:40:23.0617204Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/LargeDiskVMBackupPreview","name":"Microsoft.RecoveryServices/LargeDiskVMBackupPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"LargeDiskVMBackupPreview","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2019-07-16T11:37:52.5725628Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/MABAlertingFeature","name":"Microsoft.RecoveryServices/MABAlertingFeature","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"MABAlertingFeature","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-08-05T06:01:20.6853354Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/MercuryAutoProtection","name":"Microsoft.RecoveryServices/MercuryAutoProtection","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"MercuryAutoProtection","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2018-07-30T06:01:54.7676298Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/PPEAccess","name":"Microsoft.RecoveryServices/PPEAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PPEAccess","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2015-12-04T07:32:44.9481876Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/PremiumStorageBackup","name":"Microsoft.RecoveryServices/PremiumStorageBackup","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PremiumStorageBackup","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-02-17T13:28:46.2090603Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/RecoveryServicesCanada","name":"Microsoft.RecoveryServices/RecoveryServicesCanada","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RecoveryServicesCanada","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-08-26T09:06:35.6335719Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/RecoveryServicesBeta","name":"Microsoft.RecoveryServices/RecoveryServicesBeta","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RecoveryServicesBeta","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2015-11-02T03:57:19.2050395Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/RecoveryServicesResourceMove","name":"Microsoft.RecoveryServices/RecoveryServicesResourceMove","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RecoveryServicesResourceMove","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2018-07-04T04:28:03.0685077Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/RecoveryServicesUK","name":"Microsoft.RecoveryServices/RecoveryServicesUK","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RecoveryServicesUK","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-12-16T08:29:50.6635569Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/RecoveryServicesWUS2","name":"Microsoft.RecoveryServices/RecoveryServicesWUS2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RecoveryServicesWUS2","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2016-12-16T08:30:57.9529241Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/ResourceGraphSyncEnabled","name":"Microsoft.RecoveryServices/ResourceGraphSyncEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ResourceGraphSyncEnabled","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2018-11-13T10:51:30.9216026Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RecoveryServices/subscriptionFeatureRegistrations/WorkloadBackup","name":"Microsoft.RecoveryServices/WorkloadBackup","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"WorkloadBackup","providerNamespace":"Microsoft.RecoveryServices","state":"NotRegistered","releaseDate":"2017-05-29T10:18:19.7212695Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RemoteApp/subscriptionFeatureRegistrations/CspTest","name":"Microsoft.RemoteApp/CspTest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CspTest","providerNamespace":"Microsoft.RemoteApp","state":"NotRegistered","releaseDate":"2016-03-11T19:59:18.5205214Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RemoteApp/subscriptionFeatureRegistrations/PrivacyEnabled","name":"Microsoft.RemoteApp/PrivacyEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PrivacyEnabled","providerNamespace":"Microsoft.RemoteApp","state":"NotRegistered","releaseDate":"2016-03-02T19:22:14.9270027Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RemoteApp/subscriptionFeatureRegistrations/ple","name":"Microsoft.RemoteApp/ple","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ple","providerNamespace":"Microsoft.RemoteApp","state":"NotRegistered","releaseDate":"2015-11-11T20:50:25.7020306Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resouces/subscriptionFeatureRegistrations/EUAPParticipation","name":"Microsoft.Resouces/EUAPParticipation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EUAPParticipation","providerNamespace":"Microsoft.Resouces","state":"NotRegistered","releaseDate":"2016-09-13T20:17:26.1583702Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.RemoteApp/subscriptionFeatureRegistrations/privatePreview","name":"Microsoft.RemoteApp/privatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"privatePreview","providerNamespace":"Microsoft.RemoteApp","state":"NotRegistered","releaseDate":"2015-11-11T20:48:14.4720713Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ResourceHealth/subscriptionFeatureRegistrations/Stage3","name":"Microsoft.ResourceHealth/Stage3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Stage3","displayName":"","providerNamespace":"Microsoft.ResourceHealth","state":"NotRegistered","releaseDate":"2019-01-11T23:46:36.7120612Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/AllowInternalDelegations","name":"Microsoft.Resources/AllowInternalDelegations","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowInternalDelegations","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-02-14T00:44:33.8116766Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/ARMDisableResourcesPerRGLimit","name":"Microsoft.Resources/ARMDisableResourcesPerRGLimit","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ARMDisableResourcesPerRGLimit","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-06-22T21:36:05.0203639Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/ARMLimitx2","name":"Microsoft.Resources/ARMLimitx2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ARMLimitx2","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-06-12T02:12:08.1797138Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/AvailabilityZonePeering","name":"Microsoft.Resources/AvailabilityZonePeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AvailabilityZonePeering","displayName":"","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-03-01T19:00:45.5518578Z","description":"Availability
         zone discovery API","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/AvailabilityZones","name":"Microsoft.Resources/AvailabilityZones","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AvailabilityZones","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2016-07-18T18:08:26.5669733Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/DataControlAgreement","name":"Microsoft.Resources/DataControlAgreement","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DataControlAgreement","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-03-25T21:21:27.2197946Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/EUAPParticipation","name":"Microsoft.Resources/EUAPParticipation","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"EUAPParticipation","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2016-09-14T04:34:11.6644954Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/FairfaxDemo","name":"Microsoft.Resources/FairfaxDemo","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"FairfaxDemo","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-01-24T19:24:51.3590506Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/GermanyNorth","name":"Microsoft.Resources/GermanyNorth","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GermanyNorth","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-07-23T18:52:00.6879743Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/GermanyRegions","name":"Microsoft.Resources/GermanyRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GermanyRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:35:41.7210211Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/GermanyWestCentral","name":"Microsoft.Resources/GermanyWestCentral","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"GermanyWestCentral","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-07-23T18:52:55.3665056Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/mandatoryRetentionPeriodEnabled","name":"Microsoft.Resources/mandatoryRetentionPeriodEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"mandatoryRetentionPeriodEnabled","displayName":"mandatoryRetentionPeriodEnabled","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2017-01-26T00:40:03.4099814Z","description":"This
         feature enables a mandatory retention period for resource providers which
         implement soft-delete. Deleted resources will only be purged after the mandatory
-        retention period has passed.","approvalType":"ApprovalRequired","documentationLink":"https://docs.microsoft.com/en-us/microsoft-365/compliance/controlling-your-data-using-customer-key#register-azure-subscriptions-to-use-a-mandatory-retention-period","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/NorwayEast","name":"Microsoft.Resources/NorwayEast","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NorwayEast","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-09-18T18:56:00.2863591Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/NorwayRegions","name":"Microsoft.Resources/NorwayRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NorwayRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:36:11.3294757Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/NorwayWest","name":"Microsoft.Resources/NorwayWest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NorwayWest","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-09-18T18:57:49.3646323Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/SouthAfricaRegions","name":"Microsoft.Resources/SouthAfricaRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SouthAfricaRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:33:17.8732527Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.resources/subscriptionFeatureRegistrations/SwitzerlandNorth","name":"microsoft.resources/SwitzerlandNorth","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandNorth","providerNamespace":"microsoft.resources","state":"NotRegistered","releaseDate":"2019-07-11T19:06:29.3156196Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/SwitzerlandRegions","name":"Microsoft.Resources/SwitzerlandRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:34:48.1341409Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.resources/subscriptionFeatureRegistrations/SwitzerlandWest","name":"microsoft.resources/SwitzerlandWest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandWest","providerNamespace":"microsoft.resources","state":"NotRegistered","releaseDate":"2019-07-11T19:06:51.1794251Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/TestFlag","name":"Microsoft.Resources/TestFlag","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"TestFlag","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2017-09-14T00:31:00.1531068Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/ThrottledSubscriptions","name":"Microsoft.Resources/ThrottledSubscriptions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ThrottledSubscriptions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-06-28T01:26:58.6047953Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/UAERegions","name":"Microsoft.Resources/UAERegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"UAERegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:34:02.2992421Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Saas/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.Saas/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.Saas","state":"NotRegistered","releaseDate":"2018-04-07T03:46:23.6611175Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/AdvancedThreatProtection","name":"Microsoft.Security/AdvancedThreatProtection","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AdvancedThreatProtection","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-07-26T21:20:42.8153523Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/ApplicationWhitelisting","name":"Microsoft.Security/ApplicationWhitelisting","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplicationWhitelisting","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-10T14:48:08.3318545Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/ApplicationWhiteliting","name":"Microsoft.Security/ApplicationWhiteliting","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplicationWhiteliting","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-10T14:47:34.0472991Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/appwhitelistingaccess","name":"Microsoft.Security/appwhitelistingaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"appwhitelistingaccess","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-08-15T09:09:58.1878033Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.security/subscriptionFeatureRegistrations/Assessments","name":"microsoft.security/Assessments","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Assessments","displayName":"","providerNamespace":"microsoft.security","state":"NotRegistered","releaseDate":"2019-08-13T19:00:53.3516883Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/CoreDev1","name":"Microsoft.Security/CoreDev1","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CoreDev1","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-25T13:31:46.3428913Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Dev1","name":"Microsoft.Security/Dev1","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Dev1","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2015-12-14T17:12:21.8165102Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Dev2","name":"Microsoft.Security/Dev2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Dev2","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2015-12-14T17:14:29.2568071Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Dev3","name":"Microsoft.Security/Dev3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Dev3","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2015-12-14T17:15:03.7327229Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/discoveredSecuritySolutions","name":"Microsoft.Security/discoveredSecuritySolutions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"discoveredSecuritySolutions","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-05-24T10:51:27.2786259Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/externalSecuritySolutions","name":"Microsoft.Security/externalSecuritySolutions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"externalSecuritySolutions","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-08-06T14:30:43.0585888Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Integration","name":"Microsoft.Security/Integration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Integration","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-01-21T19:46:00.7050921Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-dev2","name":"Microsoft.Security/jitnac-dev2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-dev2","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-12-29T15:25:18.8983071Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-dev3","name":"Microsoft.Security/jitnac-dev3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-dev3","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-12-26T15:58:23.3230054Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-int","name":"Microsoft.Security/jitnac-int","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-int","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-18T13:14:43.7960742Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-rome3int","name":"Microsoft.Security/jitnac-rome3int","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-rome3int","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-02-09T11:40:46.882337Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitvmaccess","name":"Microsoft.Security/jitvmaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitvmaccess","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-07-13T14:17:56.5497615Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/NacJIT","name":"Microsoft.Security/NacJIT","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NacJIT","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-12-14T16:28:17.7802103Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.security/subscriptionFeatureRegistrations/NetworkData","name":"microsoft.security/NetworkData","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NetworkData","displayName":"","providerNamespace":"microsoft.security","state":"NotRegistered","releaseDate":"2019-09-19T12:04:04.4434392Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/networkMap","name":"Microsoft.Security/networkMap","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"networkMap","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-02-19T12:59:14.7932968Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/northSouth","name":"Microsoft.Security/northSouth","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"northSouth","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-07-29T13:08:57.5948264Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/PricingBundles","name":"Microsoft.Security/PricingBundles","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PricingBundles","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-06-20T07:31:41.90698Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/ShzadaTest","name":"Microsoft.Security/ShzadaTest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ShzadaTest","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-12-11T15:02:26.6146633Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/VaGrayLabel","name":"Microsoft.Security/VaGrayLabel","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"VaGrayLabel","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2019-06-06T11:00:02.7052057Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/WindowsDefenderAtp","name":"Microsoft.Security/WindowsDefenderAtp","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"WindowsDefenderAtp","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-10-29T15:15:29.5171343Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SerialConsole/subscriptionFeatureRegistrations/PreviewAccess","name":"Microsoft.SerialConsole/PreviewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PreviewAccess","providerNamespace":"Microsoft.SerialConsole","state":"NotRegistered","releaseDate":"2018-05-24T00:46:43.7020536Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/seabreezePreview","name":"Microsoft.ServiceFabric/seabreezePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"seabreezePreview","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2017-10-25T22:17:35.6667018Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/seabreezePrivatePreview","name":"Microsoft.ServiceFabric/seabreezePrivatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"seabreezePrivatePreview","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2018-01-20T00:24:35.1998594Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/serviceFabricEngineering","name":"Microsoft.ServiceFabric/serviceFabricEngineering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serviceFabricEngineering","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2018-04-13T23:16:23.1585225Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/serviceFabricStageAccess","name":"Microsoft.ServiceFabric/serviceFabricStageAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serviceFabricStageAccess","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2019-01-03T19:32:21.2276174Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabricMesh/subscriptionFeatureRegistrations/seabreezePrivatePreview","name":"Microsoft.ServiceFabricMesh/seabreezePrivatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"seabreezePrivatePreview","providerNamespace":"Microsoft.ServiceFabricMesh","state":"NotRegistered","releaseDate":"2018-06-30T05:33:40.0569844Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabricMesh/subscriptionFeatureRegistrations/serviceFabricEngineering","name":"Microsoft.ServiceFabricMesh/serviceFabricEngineering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serviceFabricEngineering","providerNamespace":"Microsoft.ServiceFabricMesh","state":"NotRegistered","releaseDate":"2018-06-30T05:35:15.97098Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Services/subscriptionFeatureRegistrations/RPSaaSPreview","name":"Microsoft.Services/RPSaaSPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RPSaaSPreview","providerNamespace":"Microsoft.Services","state":"NotRegistered","releaseDate":"2019-07-19T22:21:03.1319505Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SignalR/subscriptionFeatureRegistrations/betaaccess","name":"Microsoft.SignalR/betaaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaaccess","providerNamespace":"Microsoft.SignalR","state":"NotRegistered","releaseDate":"2018-02-27T04:26:59.9694112Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SignalRService/subscriptionFeatureRegistrations/betaaccess","name":"Microsoft.SignalRService/betaaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaaccess","displayName":"betaaccess","providerNamespace":"Microsoft.SignalRService","state":"NotRegistered","releaseDate":"2018-03-28T02:39:54.9381164Z","description":"Beta
+        retention period has passed.","approvalType":"ApprovalRequired","documentationLink":"https://learn.microsoft.com/en-us/microsoft-365/compliance/controlling-your-data-using-customer-key#register-azure-subscriptions-to-use-a-mandatory-retention-period","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/NorwayEast","name":"Microsoft.Resources/NorwayEast","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NorwayEast","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-09-18T18:56:00.2863591Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/NorwayRegions","name":"Microsoft.Resources/NorwayRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NorwayRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:36:11.3294757Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/NorwayWest","name":"Microsoft.Resources/NorwayWest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NorwayWest","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2019-09-18T18:57:49.3646323Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/SouthAfricaRegions","name":"Microsoft.Resources/SouthAfricaRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SouthAfricaRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:33:17.8732527Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.resources/subscriptionFeatureRegistrations/SwitzerlandNorth","name":"microsoft.resources/SwitzerlandNorth","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandNorth","providerNamespace":"microsoft.resources","state":"NotRegistered","releaseDate":"2019-07-11T19:06:29.3156196Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/SwitzerlandRegions","name":"Microsoft.Resources/SwitzerlandRegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandRegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:34:48.1341409Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.resources/subscriptionFeatureRegistrations/SwitzerlandWest","name":"microsoft.resources/SwitzerlandWest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SwitzerlandWest","providerNamespace":"microsoft.resources","state":"NotRegistered","releaseDate":"2019-07-11T19:06:51.1794251Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/TestFlag","name":"Microsoft.Resources/TestFlag","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"TestFlag","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2017-09-14T00:31:00.1531068Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/ThrottledSubscriptions","name":"Microsoft.Resources/ThrottledSubscriptions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ThrottledSubscriptions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-06-28T01:26:58.6047953Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Resources/subscriptionFeatureRegistrations/UAERegions","name":"Microsoft.Resources/UAERegions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"UAERegions","providerNamespace":"Microsoft.Resources","state":"NotRegistered","releaseDate":"2018-09-10T23:34:02.2992421Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Saas/subscriptionFeatureRegistrations/betaAccess","name":"Microsoft.Saas/betaAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaAccess","providerNamespace":"Microsoft.Saas","state":"NotRegistered","releaseDate":"2018-04-07T03:46:23.6611175Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/AdvancedThreatProtection","name":"Microsoft.Security/AdvancedThreatProtection","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AdvancedThreatProtection","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-07-26T21:20:42.8153523Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/ApplicationWhitelisting","name":"Microsoft.Security/ApplicationWhitelisting","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplicationWhitelisting","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-10T14:48:08.3318545Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/ApplicationWhiteliting","name":"Microsoft.Security/ApplicationWhiteliting","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplicationWhiteliting","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-10T14:47:34.0472991Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/appwhitelistingaccess","name":"Microsoft.Security/appwhitelistingaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"appwhitelistingaccess","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-08-15T09:09:58.1878033Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.security/subscriptionFeatureRegistrations/Assessments","name":"microsoft.security/Assessments","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Assessments","displayName":"","providerNamespace":"microsoft.security","state":"NotRegistered","releaseDate":"2019-08-13T19:00:53.3516883Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/CoreDev1","name":"Microsoft.Security/CoreDev1","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CoreDev1","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-25T13:31:46.3428913Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Dev1","name":"Microsoft.Security/Dev1","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Dev1","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2015-12-14T17:12:21.8165102Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Dev2","name":"Microsoft.Security/Dev2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Dev2","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2015-12-14T17:14:29.2568071Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Dev3","name":"Microsoft.Security/Dev3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Dev3","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2015-12-14T17:15:03.7327229Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/discoveredSecuritySolutions","name":"Microsoft.Security/discoveredSecuritySolutions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"discoveredSecuritySolutions","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-05-24T10:51:27.2786259Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/externalSecuritySolutions","name":"Microsoft.Security/externalSecuritySolutions","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"externalSecuritySolutions","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-08-06T14:30:43.0585888Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/Integration","name":"Microsoft.Security/Integration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"Integration","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-01-21T19:46:00.7050921Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-dev2","name":"Microsoft.Security/jitnac-dev2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-dev2","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-12-29T15:25:18.8983071Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-dev3","name":"Microsoft.Security/jitnac-dev3","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-dev3","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-12-26T15:58:23.3230054Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-int","name":"Microsoft.Security/jitnac-int","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-int","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-01-18T13:14:43.7960742Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitnac-rome3int","name":"Microsoft.Security/jitnac-rome3int","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitnac-rome3int","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-02-09T11:40:46.882337Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/jitvmaccess","name":"Microsoft.Security/jitvmaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"jitvmaccess","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-07-13T14:17:56.5497615Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/NacJIT","name":"Microsoft.Security/NacJIT","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NacJIT","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2016-12-14T16:28:17.7802103Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/microsoft.security/subscriptionFeatureRegistrations/NetworkData","name":"microsoft.security/NetworkData","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"NetworkData","displayName":"","providerNamespace":"microsoft.security","state":"NotRegistered","releaseDate":"2019-09-19T12:04:04.4434392Z","description":"","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/networkMap","name":"Microsoft.Security/networkMap","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"networkMap","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-02-19T12:59:14.7932968Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/northSouth","name":"Microsoft.Security/northSouth","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"northSouth","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-07-29T13:08:57.5948264Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/PricingBundles","name":"Microsoft.Security/PricingBundles","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PricingBundles","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2018-06-20T07:31:41.90698Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/ShzadaTest","name":"Microsoft.Security/ShzadaTest","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ShzadaTest","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-12-11T15:02:26.6146633Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/VaGrayLabel","name":"Microsoft.Security/VaGrayLabel","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"VaGrayLabel","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2019-06-06T11:00:02.7052057Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Security/subscriptionFeatureRegistrations/WindowsDefenderAtp","name":"Microsoft.Security/WindowsDefenderAtp","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"WindowsDefenderAtp","displayName":"","providerNamespace":"Microsoft.Security","state":"NotRegistered","releaseDate":"2017-10-29T15:15:29.5171343Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SerialConsole/subscriptionFeatureRegistrations/PreviewAccess","name":"Microsoft.SerialConsole/PreviewAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"PreviewAccess","providerNamespace":"Microsoft.SerialConsole","state":"NotRegistered","releaseDate":"2018-05-24T00:46:43.7020536Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/seabreezePreview","name":"Microsoft.ServiceFabric/seabreezePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"seabreezePreview","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2017-10-25T22:17:35.6667018Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/seabreezePrivatePreview","name":"Microsoft.ServiceFabric/seabreezePrivatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"seabreezePrivatePreview","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2018-01-20T00:24:35.1998594Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/serviceFabricEngineering","name":"Microsoft.ServiceFabric/serviceFabricEngineering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serviceFabricEngineering","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2018-04-13T23:16:23.1585225Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabric/subscriptionFeatureRegistrations/serviceFabricStageAccess","name":"Microsoft.ServiceFabric/serviceFabricStageAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serviceFabricStageAccess","providerNamespace":"Microsoft.ServiceFabric","state":"NotRegistered","releaseDate":"2019-01-03T19:32:21.2276174Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabricMesh/subscriptionFeatureRegistrations/seabreezePrivatePreview","name":"Microsoft.ServiceFabricMesh/seabreezePrivatePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"seabreezePrivatePreview","providerNamespace":"Microsoft.ServiceFabricMesh","state":"NotRegistered","releaseDate":"2018-06-30T05:33:40.0569844Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ServiceFabricMesh/subscriptionFeatureRegistrations/serviceFabricEngineering","name":"Microsoft.ServiceFabricMesh/serviceFabricEngineering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serviceFabricEngineering","providerNamespace":"Microsoft.ServiceFabricMesh","state":"NotRegistered","releaseDate":"2018-06-30T05:35:15.97098Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Services/subscriptionFeatureRegistrations/RPSaaSPreview","name":"Microsoft.Services/RPSaaSPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"RPSaaSPreview","providerNamespace":"Microsoft.Services","state":"NotRegistered","releaseDate":"2019-07-19T22:21:03.1319505Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SignalR/subscriptionFeatureRegistrations/betaaccess","name":"Microsoft.SignalR/betaaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaaccess","providerNamespace":"Microsoft.SignalR","state":"NotRegistered","releaseDate":"2018-02-27T04:26:59.9694112Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SignalRService/subscriptionFeatureRegistrations/betaaccess","name":"Microsoft.SignalRService/betaaccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"betaaccess","displayName":"betaaccess","providerNamespace":"Microsoft.SignalRService","state":"NotRegistered","releaseDate":"2018-03-28T02:39:54.9381164Z","description":"Beta
         access is for early access to Azure SignalR service new region(s) before going
         public","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Solutions/subscriptionFeatureRegistrations/ApplianceEastUS2EUAP","name":"Microsoft.Solutions/ApplianceEastUS2EUAP","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplianceEastUS2EUAP","providerNamespace":"Microsoft.Solutions","state":"NotRegistered","releaseDate":"2017-04-28T21:42:18.3038356Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Solutions/subscriptionFeatureRegistrations/ApplianceMultiRegion","name":"Microsoft.Solutions/ApplianceMultiRegion","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplianceMultiRegion","providerNamespace":"Microsoft.Solutions","state":"NotRegistered","releaseDate":"2017-08-08T22:55:32.4089404Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Solutions/subscriptionFeatureRegistrations/ApplicationGA","name":"Microsoft.Solutions/ApplicationGA","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ApplicationGA","providerNamespace":"Microsoft.Solutions","state":"NotRegistered","releaseDate":"2017-09-13T19:15:13.2949382Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/4tbpool","name":"Microsoft.Sql/4tbpool","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"4tbpool","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-04-17T17:34:42.809054Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/4TBOption","name":"Microsoft.Sql/4TBOption","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"4TBOption","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-02-14T00:32:50.4827895Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/dataSync","name":"Microsoft.Sql/dataSync","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"dataSync","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-03-24T06:53:35.2177291Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SQL/subscriptionFeatureRegistrations/dataeditor-publicpreview","name":"Microsoft.SQL/dataeditor-publicpreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"dataeditor-publicpreview","providerNamespace":"Microsoft.SQL","state":"NotRegistered","releaseDate":"2017-08-05T00:07:28.3364769Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/dw-asa","name":"Microsoft.Sql/dw-asa","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"dw-asa","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2019-10-10T20:43:49.2400608Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/ExternalTdeCertificate","name":"Microsoft.Sql/ExternalTdeCertificate","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ExternalTdeCertificate","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2018-01-23T00:31:43.9111945Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/firewall-enforce-azure-policy","name":"Microsoft.Sql/firewall-enforce-azure-policy","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"firewall-enforce-azure-policy","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2019-06-24T20:17:49.5975541Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/hyperscale-publicpreview","name":"Microsoft.Sql/hyperscale-publicpreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"hyperscale-publicpreview","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2018-08-07T17:48:17.4122983Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/IndexAdvisor","name":"Microsoft.Sql/IndexAdvisor","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IndexAdvisor","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-05-06T11:34:23.9506127Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/IndexAdvisorPreview","name":"Microsoft.Sql/IndexAdvisorPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IndexAdvisorPreview","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-12-14T16:18:47.135897Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/IndexAdvisorPublic","name":"Microsoft.Sql/IndexAdvisorPublic","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"IndexAdvisorPublic","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-05-18T21:59:42.6611139Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SQL/subscriptionFeatureRegistrations/LongTermRetention","name":"Microsoft.SQL/LongTermRetention","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"LongTermRetention","providerNamespace":"Microsoft.SQL","state":"NotRegistered","releaseDate":"2016-09-21T04:32:03.1438274Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/LongTermRetentionV2","name":"Microsoft.Sql/LongTermRetentionV2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"LongTermRetentionV2","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2018-03-04T12:08:59.3778641Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SQL/subscriptionFeatureRegistrations/ManagedInstancePublic","name":"Microsoft.SQL/ManagedInstancePublic","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ManagedInstancePublic","providerNamespace":"Microsoft.SQL","state":"NotRegistered","releaseDate":"2017-11-03T09:30:48.1792744Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SQL/subscriptionFeatureRegistrations/multiaz-preview","name":"Microsoft.SQL/multiaz-preview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"multiaz-preview","providerNamespace":"Microsoft.SQL","state":"NotRegistered","releaseDate":"2017-10-02T16:50:15.5989625Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SQL/subscriptionFeatureRegistrations/multiaz-test","name":"Microsoft.SQL/multiaz-test","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"multiaz-test","providerNamespace":"Microsoft.SQL","state":"NotRegistered","releaseDate":"2017-10-02T21:15:16.0094322Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/pesto","name":"Microsoft.Sql/pesto","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"pesto","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-09-12T19:16:00.7805148Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/pesto-lite","name":"Microsoft.Sql/pesto-lite","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"pesto-lite","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-05-31T03:50:27.2827114Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/queryeditor","name":"Microsoft.Sql/queryeditor","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"queryeditor","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2016-02-25T00:03:46.9778254Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/queryeditor-publicpreview","name":"Microsoft.Sql/queryeditor-publicpreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"queryeditor-publicpreview","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2016-12-22T22:41:38.0805226Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/queryeditor-webqueryendpoint","name":"Microsoft.Sql/queryeditor-webqueryendpoint","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"queryeditor-webqueryendpoint","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2019-06-05T17:00:28.5046893Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/QueryPerformanceInsightPublic","name":"Microsoft.Sql/QueryPerformanceInsightPublic","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"QueryPerformanceInsightPublic","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-09-16T16:16:14.0969056Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/serverless-publicpreview","name":"Microsoft.Sql/serverless-publicpreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"serverless-publicpreview","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2019-03-05T01:25:47.1915341Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/SQL-DW","name":"Microsoft.Sql/SQL-DW","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SQL-DW","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-06-16T22:05:22.2140347Z","approvalType":"ApprovalRequired","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-4tb-publicpreview","name":"Microsoft.Sql/sqldb-4tb-publicpreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-4tb-publicpreview","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-02-07T03:08:29.6974313Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-ActiveDirectoryAdmin","name":"Microsoft.Sql/sqldb-ActiveDirectoryAdmin","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-ActiveDirectoryAdmin","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-08-11T18:24:26.6862273Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.SQL/subscriptionFeatureRegistrations/sqldb-addonstorage","name":"Microsoft.SQL/sqldb-addonstorage","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-addonstorage","providerNamespace":"Microsoft.SQL","state":"NotRegistered","releaseDate":"2017-06-27T00:57:24.7534459Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-ElasticJobs","name":"Microsoft.Sql/sqldb-ElasticJobs","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-ElasticJobs","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-09-10T18:36:32.463205Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-elasticpool","name":"Microsoft.Sql/sqldb-elasticpool","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-elasticpool","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-04-22T21:42:28.8370909Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-fsv2","name":"Microsoft.Sql/sqldb-fsv2","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-fsv2","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2019-10-10T23:53:15.3203623Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-higherStandardPerDbDtu","name":"Microsoft.Sql/sqldb-higherStandardPerDbDtu","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-higherStandardPerDbDtu","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-05-24T16:22:25.8187801Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-JobAccounts","name":"Microsoft.Sql/sqldb-JobAccounts","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-JobAccounts","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2016-06-13T21:32:05.7215762Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-mseries","name":"Microsoft.Sql/sqldb-mseries","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-mseries","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2019-10-10T23:53:16.5703037Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-premiumrs","name":"Microsoft.Sql/sqldb-premiumrs","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-premiumrs","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2017-01-27T19:11:34.4050518Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldb-vcoremodel","name":"Microsoft.Sql/sqldb-vcoremodel","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldb-vcoremodel","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2018-03-14T18:39:12.1354578Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldbsterling","name":"Microsoft.Sql/sqldbsterling","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldbsterling","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2014-11-06T20:57:26.5085344Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/sqldbtde","name":"Microsoft.Sql/sqldbtde","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"sqldbtde","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2015-03-04T00:28:51.1992171Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Sql/subscriptionFeatureRegistrations/tdeAkvIntegration","name":"Microsoft.Sql/tdeAkvIntegration","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"tdeAkvIntegration","providerNamespace":"Microsoft.Sql","state":"NotRegistered","releaseDate":"2016-10-30T09:20:47.8640756Z","approvalType":"AutoApproval","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Storage/subscriptionFeatureRegistrations/ADLSGen1Shim","name":"Microsoft.Storage/ADLSGen1Shim","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"ADLSGen1Shim","displayName":"ADLSGen1Shim","providerNamespace":"Microsoft.Storage","state":"NotRegistered","releaseDate":"2019-06-25T03:42:21.893602Z","description":"Enables
         ADLS Gen 1 Shim (aka ADLS Gen 1 APIs) for Hierarchical Namespace enabled storage
@@ -74,11 +74,11 @@ interactions:
         Tasks Private Preview","providerNamespace":"Microsoft.ContainerRegistry","state":"NotRegistered","releaseDate":"2020-02-20T00:50:34.6408915Z","description":"","approvalType":"AutoApproval","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.ContainerService/subscriptionFeatureRegistrations/UseCustomizedUbuntuPreview","name":"Microsoft.ContainerService/UseCustomizedUbuntuPreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"UseCustomizedUbuntuPreview","displayName":"UseCustomizedUbuntuPreview","providerNamespace":"Microsoft.ContainerService","state":"NotRegistered","releaseDate":"2020-02-20T23:39:21.7300205Z","description":"Preview
         feature to use customized Ubuntu","approvalType":"AutoApproval","documentationLink":"https://msazure.visualstudio.com/CloudNativeCompute/_wiki/wikis/CloudNativeCompute.wiki/43096/Private-Preview-Using-Ubuntu-18.04","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Compute/subscriptionFeatureRegistrations/SIGEncryption","name":"Microsoft.Compute/SIGEncryption","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"SIGEncryption","displayName":"SIG
         Customer Managed Key Encryption","providerNamespace":"Microsoft.Compute","state":"NotRegistered","releaseDate":"2020-02-21T02:27:13.2802297Z","description":"To
-        enable replicating to SIG using customer managed keys","approvalType":"AutoApproval","documentationLink":"https://docs.microsoft.com/en-us/azure/virtual-machines/image-version-encryption","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Databricks/subscriptionFeatureRegistrations/DevFedRAMP","name":"Microsoft.Databricks/DevFedRAMP","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DevFedRAMP","displayName":"DevFedRAMP","providerNamespace":"Microsoft.Databricks","state":"NotRegistered","releaseDate":"2020-02-21T20:49:10.5840757Z","description":"Fed
+        enable replicating to SIG using customer managed keys","approvalType":"AutoApproval","documentationLink":"https://learn.microsoft.com/en-us/azure/virtual-machines/image-version-encryption","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Databricks/subscriptionFeatureRegistrations/DevFedRAMP","name":"Microsoft.Databricks/DevFedRAMP","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"DevFedRAMP","displayName":"DevFedRAMP","providerNamespace":"Microsoft.Databricks","state":"NotRegistered","releaseDate":"2020-02-21T20:49:10.5840757Z","description":"Fed
         RAMP related feature flag for Development environment","approvalType":"ApprovalRequired","documentationLink":"","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Capacity/subscriptionFeatureRegistrations/QuotaAPI","name":"Microsoft.Capacity/QuotaAPI","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"QuotaAPI","displayName":"Quota
         Management API","providerNamespace":"Microsoft.Capacity","state":"Registered","releaseDate":"2019-12-05T00:44:49.7953791Z","description":"The
         Azure Quota REST API allows to query and manage service limits (quota) for
-        the resources programmatically.","approvalType":"ApprovalRequired","documentationLink":"https://docs.microsoft.com/en-us/rest/api/reserved-vm-instances/quotaapi","registrationDate":"2021-01-20T02:13:39.3682683Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowCortexAccess","name":"Microsoft.Network/AllowCortexAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCortexAccess","providerNamespace":"Microsoft.Network","state":"Registered","releaseDate":"2017-11-20T21:46:38.7851499Z","approvalType":"AutoApproval","registrationDate":"2018-09-27T11:31:47.9105826Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVnetPeering","name":"Microsoft.Network/AllowVnetPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVnetPeering","providerNamespace":"Microsoft.Network","state":"Registered","releaseDate":"2016-05-15T16:41:21.4772446Z","approvalType":"AutoApproval","registrationDate":"2016-08-02T17:13:05.0290529Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Solutions/subscriptionFeatureRegistrations/AppliancePreview","name":"Microsoft.Solutions/AppliancePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AppliancePreview","providerNamespace":"Microsoft.Solutions","state":"Registered","releaseDate":"2016-08-22T18:40:49.0728086Z","approvalType":"ApprovalRequired","registrationDate":"2016-08-22T20:42:10.3986955Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Web/subscriptionFeatureRegistrations/CentralUSRegionEnabled","name":"Microsoft.Web/CentralUSRegionEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CentralUSRegionEnabled","providerNamespace":"Microsoft.Web","state":"Registered","releaseDate":"2019-04-09T19:43:47.9740123Z","approvalType":"AutoApproval","registrationDate":"2019-10-13T03:51:59.0841341Z","shouldFeatureDisplayInPortal":false}}]}'
+        the resources programmatically.","approvalType":"ApprovalRequired","documentationLink":"https://learn.microsoft.com/en-us/rest/api/reserved-vm-instances/quotaapi","registrationDate":"2021-01-20T02:13:39.3682683Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowCortexAccess","name":"Microsoft.Network/AllowCortexAccess","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowCortexAccess","providerNamespace":"Microsoft.Network","state":"Registered","releaseDate":"2017-11-20T21:46:38.7851499Z","approvalType":"AutoApproval","registrationDate":"2018-09-27T11:31:47.9105826Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Network/subscriptionFeatureRegistrations/AllowVnetPeering","name":"Microsoft.Network/AllowVnetPeering","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AllowVnetPeering","providerNamespace":"Microsoft.Network","state":"Registered","releaseDate":"2016-05-15T16:41:21.4772446Z","approvalType":"AutoApproval","registrationDate":"2016-08-02T17:13:05.0290529Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Solutions/subscriptionFeatureRegistrations/AppliancePreview","name":"Microsoft.Solutions/AppliancePreview","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"AppliancePreview","providerNamespace":"Microsoft.Solutions","state":"Registered","releaseDate":"2016-08-22T18:40:49.0728086Z","approvalType":"ApprovalRequired","registrationDate":"2016-08-22T20:42:10.3986955Z","shouldFeatureDisplayInPortal":false}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Features/featureProviders/Microsoft.Web/subscriptionFeatureRegistrations/CentralUSRegionEnabled","name":"Microsoft.Web/CentralUSRegionEnabled","type":"Microsoft.Features/featureProviders/subscriptionFeatureRegistrations","properties":{"subscriptionId":"02343036-f57a-4117-b08f-8347acd97fd1","featureName":"CentralUSRegionEnabled","providerNamespace":"Microsoft.Web","state":"Registered","releaseDate":"2019-04-09T19:43:47.9740123Z","approvalType":"AutoApproval","registrationDate":"2019-10-13T03:51:59.0841341Z","shouldFeatureDisplayInPortal":false}}]}'
     headers:
       cache-control:
       - no-cache
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_provider_operation.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_provider_operation.yaml
index 8887f79f2df..4e7706725dd 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_provider_operation.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_provider_operation.yaml
@@ -9384,7 +9384,7 @@ interactions:
         that the storage size for each logical partition key is 20GB. You can enable
         PartitionKeyStatistics in Diagnostic Log to know the storage consumption for
         top partition keys. For more info about Cosmos DB storage quota, please check
-        this doc https://docs.microsoft.com/en-us/azure/cosmos-db/concepts-limits.
+        this doc https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits.
         After deprecation, the remaining alert rules still defined on the deprecated
         metric will be automatically disabled post the deprecation date.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"lockAggregationType\":\"Total\",\"sourceMdmAccount\":\"CosmosDBCustomer\",\"sourceMdmNamespace\":\"AzureMonitor\",\"fillGapWithZero\":true,\"category\":\"Requests\",\"resourceIdDimensionNameOverride\":\"GlobalDatabaseAccountName\",\"supportedAggregationTypes\":[\"Total\",\"
         Average\"],\"supportedTimeGrainTypes\":[\"PT5M\"],\"dimensions\":[{\"name\":\"CollectionName\",\"internalName\":\"CollectionName\"},{\"name\":\"DatabaseName\",\"internalName\":\"DatabaseName\"},{\"name\":\"Region\",\"internalName\":\"Region\"}]},{\"name\":\"DocumentCount\",\"displayName\":\"Document
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_create_policy_assignment_random.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_create_policy_assignment_random.yaml
index f20208a820a..2765691f67a 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_create_policy_assignment_random.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_create_policy_assignment_random.yaml
@@ -368,7 +368,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -655,7 +655,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -850,12 +850,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -979,7 +979,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -1013,7 +1013,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},{\"count\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -1158,7 +1158,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -1526,7 +1526,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -1647,7 +1647,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -1677,7 +1677,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -1771,7 +1771,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -2785,7 +2785,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -2896,7 +2896,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -2969,7 +2969,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -2986,7 +2986,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -3244,7 +3244,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -3357,7 +3357,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -3512,7 +3512,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -3644,7 +3644,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -3914,7 +3914,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -3996,7 +3996,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -4043,7 +4043,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4113,7 +4113,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -4235,7 +4235,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4419,7 +4419,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -4538,7 +4538,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -4706,7 +4706,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -4785,7 +4785,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.0.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -5443,7 +5443,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift","rancher_rke","tkg"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -5559,7 +5559,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -5567,7 +5567,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -5604,7 +5604,7 @@ interactions:
         workflow automation are created.","strongType":"location"}},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -5688,7 +5688,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -5796,7 +5796,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Microsoft
         Managed Control 1258 - Contingency Training","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -5815,7 +5815,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -5836,7 +5836,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -5963,7 +5963,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -6643,7 +6643,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -6835,7 +6835,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -6938,7 +6938,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"2.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"2.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift","rancher_rke","tkg"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -7243,7 +7243,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -7364,7 +7364,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -7408,7 +7408,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -8020,7 +8020,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -8671,7 +8671,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -8822,7 +8822,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -8927,7 +8927,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -9308,7 +9308,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -10018,7 +10018,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -10029,7 +10029,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -10037,7 +10037,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -10282,7 +10282,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -10453,7 +10453,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -10508,7 +10508,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -11113,7 +11113,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"Vulnerabilities
@@ -11214,7 +11214,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -11254,7 +11254,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -11404,7 +11404,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -11452,7 +11452,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -11626,7 +11626,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -11645,7 +11645,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -12112,7 +12112,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12148,7 +12148,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -12296,7 +12296,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -12307,7 +12307,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -12316,7 +12316,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_default.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_default.yaml
index d0660e3b6b4..7f22b8417c4 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_default.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_default.yaml
@@ -325,7 +325,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -623,7 +623,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -838,12 +838,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -965,7 +965,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -999,7 +999,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -1156,7 +1156,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -1413,7 +1413,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -1489,7 +1489,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -1559,7 +1559,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -1687,7 +1687,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -1729,7 +1729,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -1834,7 +1834,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -1844,7 +1844,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -2955,7 +2955,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -3066,7 +3066,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -3139,7 +3139,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -3156,7 +3156,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -3420,7 +3420,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -3533,7 +3533,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -3713,7 +3713,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -3893,7 +3893,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -4178,7 +4178,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -4273,7 +4273,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -4326,7 +4326,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4403,7 +4403,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -4563,7 +4563,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4630,7 +4630,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4772,7 +4772,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -4912,7 +4912,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -5081,7 +5081,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -5176,7 +5176,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -5235,7 +5235,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -5884,7 +5884,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -6000,7 +6000,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -6008,7 +6008,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -6049,7 +6049,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -6138,7 +6138,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -6253,7 +6253,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -6287,7 +6287,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -6308,7 +6308,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -6450,7 +6450,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -6980,7 +6980,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -7173,7 +7173,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -7394,7 +7394,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -7506,7 +7506,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -7568,8 +7568,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -7874,7 +7874,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -8013,7 +8013,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -8064,7 +8064,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -8595,7 +8595,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -8672,7 +8672,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -9423,7 +9423,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -9579,7 +9579,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -9693,7 +9693,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -10130,7 +10130,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -10859,7 +10859,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -10870,7 +10870,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -10878,7 +10878,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -11027,7 +11027,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -11152,7 +11152,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -11332,7 +11332,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -11387,7 +11387,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -12073,7 +12073,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -12179,7 +12179,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12220,7 +12220,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12395,7 +12395,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12443,7 +12443,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12594,7 +12594,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12617,7 +12617,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -13102,7 +13102,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -13138,7 +13138,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -13329,7 +13329,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -13340,7 +13340,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -13349,7 +13349,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -19305,7 +19305,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -19603,7 +19603,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -19818,12 +19818,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -19945,7 +19945,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -19979,7 +19979,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -20136,7 +20136,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -20393,7 +20393,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -20469,7 +20469,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -20539,7 +20539,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -20667,7 +20667,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -20709,7 +20709,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -20814,7 +20814,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -20824,7 +20824,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -21935,7 +21935,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -22046,7 +22046,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -22119,7 +22119,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -22136,7 +22136,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -22400,7 +22400,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -22513,7 +22513,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -22693,7 +22693,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -22873,7 +22873,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -23158,7 +23158,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -23253,7 +23253,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -23306,7 +23306,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -23383,7 +23383,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -23543,7 +23543,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -23610,7 +23610,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -23752,7 +23752,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -23892,7 +23892,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -24061,7 +24061,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -24156,7 +24156,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -24215,7 +24215,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -24864,7 +24864,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -24980,7 +24980,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -24988,7 +24988,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -25029,7 +25029,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -25118,7 +25118,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -25233,7 +25233,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -25267,7 +25267,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25288,7 +25288,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -25430,7 +25430,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25960,7 +25960,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -26153,7 +26153,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -26374,7 +26374,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -26486,7 +26486,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -26548,8 +26548,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -26854,7 +26854,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26993,7 +26993,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -27044,7 +27044,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -27575,7 +27575,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -27652,7 +27652,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -28403,7 +28403,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -28559,7 +28559,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -28673,7 +28673,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -29110,7 +29110,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -29839,7 +29839,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -29850,7 +29850,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -29858,7 +29858,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -30007,7 +30007,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -30132,7 +30132,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -30312,7 +30312,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -30367,7 +30367,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -31053,7 +31053,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -31159,7 +31159,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -31200,7 +31200,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -31375,7 +31375,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -31423,7 +31423,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -31574,7 +31574,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -31597,7 +31597,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -32082,7 +32082,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -32118,7 +32118,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -32309,7 +32309,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -32320,7 +32320,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -32329,7 +32329,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_management_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_management_group.yaml
index 55f4fdfe6ad..f5b979770f1 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_management_group.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policy_management_group.yaml
@@ -766,7 +766,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Integrate
         risk management process into SDLC\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_C1567
         - Integrate risk management process into SDLC\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Regulatory
@@ -1105,7 +1105,7 @@ interactions:
         Event Hub should have public network access disabled. Disabling public network
         access improves security by ensuring that the resource isn't exposed on the
         public internet. You can limit exposure of your resources by creating private
-        endpoints instead. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        endpoints instead. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"equals\":\"Microsoft.EventHub/namespaces/networkRuleSets\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.EventHub/namespaces/networkRuleSets/publicNetworkAccess\"}]},{\"allOf\":[{\"equals\":\"Microsoft.EventHub/namespaces\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.EventHub/namespaces/publicNetworkAccess\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0602787f-9896-402a-a6e1-39ee63ee435e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0602787f-9896-402a-a6e1-39ee63ee435e\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1658 - Secure Name / Address Resolution Service (Recursive
@@ -1242,7 +1242,7 @@ interactions:
         or disable the execution of the policy\"},\"allowedValues\":[\"Manual\",\"Disabled\"],\"defaultValue\":\"Manual\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"defaultState\":\"Unknown\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ad71d0-52be-6503-4908-e015460a16ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ad71d0-52be-6503-4908-e015460a16ae\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -1556,12 +1556,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1755 - Contacts With Security Groups And Associations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Program Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -1684,7 +1684,7 @@ interactions:
         Databricks Workspaces should have public network access disabled. Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your resources by
-        creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/databricks/administration-guide/cloud-configurations/azure/vnet-inject\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure
+        creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/databricks/administration-guide/cloud-configurations/azure/vnet-inject\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure
         Databricks\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Databricks/workspaces\"},{\"field\":\"Microsoft.Databricks/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e7849de-b939-4c50-ab48-fc6b0f5eeba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e7849de-b939-4c50-ab48-fc6b0f5eeba2\"},{\"properties\":{\"displayName\":\"Container
         Apps should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
@@ -1717,7 +1717,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -1772,7 +1772,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Maintain
         data breach records\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_0351
         - Maintain data breach records\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Regulatory
@@ -1980,7 +1980,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -2330,7 +2330,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Organizational
         Users) | Use Of Ficam-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -2442,7 +2442,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Govern
         policies and procedures\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_0292
@@ -2594,7 +2594,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1749 - Mission/Business Process Definition\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -2751,7 +2751,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -2827,7 +2827,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -2981,7 +2981,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Synapse
         Workspaces should use only Azure Active Directory identities for authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
@@ -3008,7 +3008,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -3272,7 +3272,7 @@ interactions:
         Service app slots should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/slots\"},{\"field\":\"Microsoft.Web/sites/slots/virtualNetworkSubnetId\",\"equals\":\"\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24b7a1c6-44fe-40cc-a2e6-242d2ef70e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24b7a1c6-44fe-40cc-a2e6-242d2ef70e98\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -4774,7 +4774,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -4935,7 +4935,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Remote Maintenance | Document Remote Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Regulatory
@@ -5047,7 +5047,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -5107,7 +5107,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -5466,7 +5466,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -5613,7 +5613,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -5806,7 +5806,7 @@ interactions:
         but CMKs are commonly required to meet regulatory compliance standards. Customer-managed
         keys enable the data to be encrypted with an Azure Key Vault key created and
         owned by you, with full control and responsibility, including rotation and
-        management. Learn more at https://docs.microsoft.com/azure/azure-fluid-relay/concepts/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Fluid
+        management. Learn more at https://learn.microsoft.com/azure/azure-fluid-relay/concepts/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Fluid
         Relay\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.FluidRelay/fluidRelayServers\"},{\"field\":\"Microsoft.FluidRelay/fluidRelayServers/encryption.customerManagedKeyEncryption\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46388f67-373c-4018-98d3-2b83172dd13a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46388f67-373c-4018-98d3-2b83172dd13a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party
@@ -5869,7 +5869,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -6021,7 +6021,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6232,7 +6232,7 @@ interactions:
         keys, but CMK are commonly required to meet regulatory compliance standards.
         CMK enable the data to be encrypted with an Azure Key Vault key created and
         owned by you. You have full control and responsibility for the key lifecycle,
-        including rotation and management. Learn more at https://docs.microsoft.com/azure/health-bot/cmk\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Health
+        including rotation and management. Learn more at https://learn.microsoft.com/azure/health-bot/cmk\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Health
         Bot\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthBot/healthBots\"},{\"field\":\"Microsoft.HealthBot/healthBots/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d080fa5-a6d2-4f98-ba9c-f482d0d335c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d080fa5-a6d2-4f98-ba9c-f482d0d335c0\"},{\"properties\":{\"displayName\":\"Function
         apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The
@@ -6389,7 +6389,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -6526,7 +6526,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"],\"defaultValue\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -6608,7 +6608,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"[Preview]:
         Assign Built-In User-Assigned Managed Identity to Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create
@@ -6836,7 +6836,7 @@ interactions:
         DB database accounts should have local authentication methods disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2\"},{\"properties\":{\"displayName\":\"App
         Service apps should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With
@@ -6866,7 +6866,7 @@ interactions:
         Key Vault should have firewall enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         the key vault firewall so that the key vault is not accessible by default
         to any public IPs. You can then configure specific IP ranges to limit access
-        to those networks. Learn more at: https://docs.microsoft.com/azure/key-vault/general/network-security\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Key
+        to those networks. Learn more at: https://learn.microsoft.com/azure/key-vault/general/network-security\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -7083,7 +7083,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Review
         and reevaluate privileges\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_C1207
@@ -7252,7 +7252,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHSMs/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59fee2f4-d439-4f1b-9b9a-982e1474bfd8\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -7474,7 +7474,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -7654,7 +7654,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Container
         registry images should have vulnerability findings resolved","policyType":"BuiltIn","mode":"All","description":"Container
@@ -7908,7 +7908,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.1.0","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.1.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","Audit","deny","Deny","disabled","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -8015,7 +8015,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"3.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine.","portalReview":"true"},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -8138,7 +8138,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks.","metadata":{"version":"4.0.1","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks.","metadata":{"version":"4.0.1","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"logAnalyticsWorkspaceResourceId":{"type":"String","metadata":{"displayName":"LogAnalyticsWorkspaceResourceId","description":"Optional
         Log Analytics workspace resource id. If provided, will be used as part of
         the feature configuration. Otherwise, default workspace will be provisioned.
@@ -8197,7 +8197,7 @@ interactions:
         By default the encryptio is done using Service managed keys, customer-managed
         keys enable the data to be encrypted with an Azure Key Vault key created and
         owned by you. You have full control and responsibility for the key lifecycle,
-        including rotation and management. Learn more at https://docs.microsoft.com/azure/load-testing/how-to-configure-customer-managed-keys?tabs=portal.","metadata":{"version":"1.0.0","category":"Azure
+        including rotation and management. Learn more at https://learn.microsoft.com/azure/load-testing/how-to-configure-customer-managed-keys?tabs=portal.","metadata":{"version":"1.0.0","category":"Azure
         Load Testing"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy."},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.LoadTestService/loadtests"},{"field":"Microsoft.LoadTestService/loadTests/encryption.keyUrl","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/65c4f833-1f2e-426c-8780-f6d7593bed7a","type":"Microsoft.Authorization/policyDefinitions","name":"65c4f833-1f2e-426c-8780-f6d7593bed7a"},{"properties":{"displayName":"Update
         rules of behavior and access agreements","policyType":"BuiltIn","mode":"All","description":"CMA_0521
@@ -8633,7 +8633,7 @@ interactions:
         implements this Identification and Authentication control","metadata":{"version":"1.0.1","category":"Regulatory
         Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b","type":"Microsoft.Authorization/policyDefinitions","name":"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b"},{"properties":{"displayName":"Hotpatch
         should be enabled for Windows Server Azure Edition VMs","policyType":"BuiltIn","mode":"Indexed","description":"Minimize
-        reboots and install updates quickly with hotpatch. Learn more at https://docs.microsoft.com/azure/automanage/automanage-hotpatch","metadata":{"version":"1.0.0","category":"Automanage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        reboots and install updates quickly with hotpatch. Learn more at https://learn.microsoft.com/azure/automanage/automanage-hotpatch","metadata":{"version":"1.0.0","category":"Automanage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku","in":["2022-datacenter-azure-edition","2022-datacenter-azure-edition-core","2022-datacenter-azure-edition-core-smalldisk","2022-datacenter-azure-edition-smalldisk"]},{"not":{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.enableHotpatching","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d02d2f7-e38b-4bdc-96f3-adc0a8726abc","type":"Microsoft.Authorization/policyDefinitions","name":"6d02d2f7-e38b-4bdc-96f3-adc0a8726abc"},{"properties":{"displayName":"Microsoft
         Managed Control 1437 - Media Transport | Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -8988,7 +8988,7 @@ interactions:
         Defender for Cloud extension for Azure Arc provides threat protection for
         your Arc enabled Kubernetes clusters. The extension collects data from all
         nodes in the cluster and sends it to the Azure Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"7.1.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"7.1.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"logAnalyticsWorkspaceResourceId":{"type":"String","metadata":{"displayName":"LogAnalyticsWorkspaceResourceId","description":"Optional
         Log Analytics workspace resource id. If provided, will be used as part of
         the feature configuration. Otherwise, default workspace will be provisioned.
@@ -9155,7 +9155,7 @@ interactions:
         Service apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"3.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"3.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -9163,7 +9163,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -9219,7 +9219,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -9316,7 +9316,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -9461,7 +9461,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -9499,7 +9499,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -9543,7 +9543,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Document
         the legal basis for processing personal information","policyType":"BuiltIn","mode":"All","description":"CMA_0206
@@ -9798,7 +9798,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -10534,7 +10534,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - User Identification And Authentication | Network Access
@@ -10735,7 +10735,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -11021,7 +11021,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"Designate
         individuals to fulfill specific roles and responsibilities","policyType":"BuiltIn","mode":"All","description":"CMA_C1747
@@ -11087,7 +11087,7 @@ interactions:
         can raise or lower the minimal TLS version using the API, for both new Synapse
         workspaces or existing workspaces. So users who need to use a lower client
         version in the workspaces can connect while users who has security requirement
-        can raise the minimum TLS version. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.1.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        can raise the minimum TLS version. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.1.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces/dedicatedSQLminimalTlsSettings"},{"field":"Microsoft.Synapse/workspaces/dedicatedSQLminimalTlsSettings/minimalTlsVersion","notEquals":"1.2"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-01'')]","operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/dedicatedSQLminimalTlsSettings/minimalTlsVersion","value":"1.2"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b5c654c-fb07-471b-aa8f-15fea733f140","type":"Microsoft.Authorization/policyDefinitions","name":"8b5c654c-fb07-471b-aa8f-15fea733f140"},{"properties":{"displayName":"Microsoft
         Managed Control 1170 - Penetration Testing","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -11249,7 +11249,7 @@ interactions:
         Defender for Cloud extension for Azure Arc provides threat protection for
         your Arc enabled Kubernetes clusters. The extension collects data from all
         nodes in the cluster and sends it to the Azure Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"6.0.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"6.0.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notIn":["aks","aks_management","eks","gke"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -11311,8 +11311,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Deliver
         security assessment results","policyType":"BuiltIn","mode":"All","description":"CMA_C1147
@@ -11620,7 +11620,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -11823,7 +11823,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Remove
         or redact any PII","policyType":"BuiltIn","mode":"All","description":"CMA_C1833
         - Remove or redact any PII","metadata":{"version":"1.1.0","category":"Regulatory
@@ -11893,7 +11893,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Microsoft
         Managed Control 1806 - Governance And Privacy Program ","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Accountability, Audit, and Risk Management control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -12783,7 +12783,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks","metadata":{"version":"2.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks","metadata":{"version":"2.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.defender.securityMonitoring.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -12887,7 +12887,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -13000,7 +13000,7 @@ interactions:
         Link Access modes are set on your AMPLS to control whether ingestion and query
         requests from your networks can reach all resources, or only Private Link
         resources (to prevent data exfiltration). Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},{"anyOf":[{"field":"Microsoft.Insights/privateLinkScopes/accessModeSettings.ingestionAccessMode","notEquals":"PrivateOnly"},{"field":"Microsoft.Insights/privateLinkScopes/accessModeSettings.queryAccessMode","notEquals":"PrivateOnly"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a499fed8-bcc8-4195-b154-641f14743757","type":"Microsoft.Authorization/policyDefinitions","name":"a499fed8-bcc8-4195-b154-641f14743757"},{"properties":{"displayName":"App
         Service apps should only be accessible over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use
         of HTTPS ensures server/service authentication and protects data in transit
@@ -13549,7 +13549,7 @@ interactions:
         key vaults to enable firewall","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         the key vault firewall so that the key vault is not accessible by default
         to any public IPs. You can then configure specific IP ranges to limit access
-        to those networks. Learn more at: https://docs.microsoft.com/azure/key-vault/general/network-security","metadata":{"version":"1.1.1","category":"Key
+        to those networks. Learn more at: https://learn.microsoft.com/azure/key-vault/general/network-security","metadata":{"version":"1.1.1","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/f25e0fa2-a7c8-4377-a976-54943a77a395"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac673a9a-f77d-4846-b2d8-a57f8e1c01dc","type":"Microsoft.Authorization/policyDefinitions","name":"ac673a9a-f77d-4846-b2d8-a57f8e1c01dc"},{"properties":{"displayName":"Configure
         Synapse workspaces to have auditing enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
@@ -14014,7 +14014,7 @@ interactions:
         App Service apps to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.1","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.1","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -14238,7 +14238,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -14491,7 +14491,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"Automate
         remote maintenance activities","policyType":"BuiltIn","mode":"All","description":"CMA_C1402
@@ -15045,7 +15045,7 @@ interactions:
         Link Access modes are set on your AMPLS to control whether ingestion and query
         requests from your networks can reach all resources, or only Private Link
         resources (to prevent data exfiltration). Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.ingestionAccessMode\",\"notEquals\":\"PrivateOnly\"},{\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.queryAccessMode\",\"notEquals\":\"PrivateOnly\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.ingestionAccessMode\",\"value\":\"PrivateOnly\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.queryAccessMode\",\"value\":\"PrivateOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bec5db8e-c4e3-40f9-a545-e0bd00065c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bec5db8e-c4e3-40f9-a545-e0bd00065c82\"},{\"properties\":{\"displayName\":\"Windows
         Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows
         Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit
@@ -15310,7 +15310,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -15697,7 +15697,7 @@ interactions:
         Batch accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2022-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c520cefc-285f-40f3-86e2-2efc38ef1f64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c520cefc-285f-40f3-86e2-2efc38ef1f64\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -16245,7 +16245,7 @@ interactions:
         Service Bus should have public network access disabled. Disabling public network
         access improves security by ensuring that the resource isn't exposed on the
         public internet. You can limit exposure of your resources by creating private
-        endpoints instead. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service
+        endpoints instead. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"equals\":\"Microsoft.ServiceBus/namespaces/networkRuleSets\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.ServiceBus/namespaces/networkRuleSets/publicNetworkAccess\"}]},{\"allOf\":[{\"equals\":\"Microsoft.ServiceBus/namespaces\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.ServiceBus/namespaces/publicNetworkAccess\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbd11fd3-3002-4907-b6c8-579f0e700e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbd11fd3-3002-4907-b6c8-579f0e700e13\"},{\"properties\":{\"displayName\":\"Define
         and document government oversight\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_C1587
@@ -16414,7 +16414,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -16425,7 +16425,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -16434,7 +16434,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -16658,7 +16658,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -16903,7 +16903,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Azure
         NetApp Files Volumes should not use NFSv3 protocol type\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Disallow
         the use of NFSv3 protocol type to prevent unsecure access to volumes. NFSv4.1
@@ -17215,7 +17215,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Azure
@@ -17319,7 +17319,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-06-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth\",\"value\":true}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049\"},{\"properties\":{\"displayName\":\"Microsoft
@@ -18146,7 +18146,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -18273,7 +18273,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -18326,7 +18326,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -18569,7 +18569,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -18630,7 +18630,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"secondPrivateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second
@@ -18886,7 +18886,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18919,7 +18919,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Microsoft Defender for Cloud''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Microsoft Defender for Cloud''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -19651,7 +19651,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.1.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.1.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","Audit","deny","Deny","disabled","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Configure
         Function app slots to use the latest TLS version","policyType":"BuiltIn","mode":"Indexed","description":"Periodically,
         newer versions are released for TLS either due to security flaws, include
@@ -19722,7 +19722,7 @@ interactions:
         Service Environment should have internal encryption enabled","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.1","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.1","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Microsoft
         Managed Control 1857 - Privacy Incident Response ","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -19956,7 +19956,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -19967,7 +19967,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -19975,7 +19975,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
@@ -22167,7 +22167,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Integrate
         risk management process into SDLC\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_C1567
         - Integrate risk management process into SDLC\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Regulatory
@@ -22506,7 +22506,7 @@ interactions:
         Event Hub should have public network access disabled. Disabling public network
         access improves security by ensuring that the resource isn't exposed on the
         public internet. You can limit exposure of your resources by creating private
-        endpoints instead. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        endpoints instead. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"equals\":\"Microsoft.EventHub/namespaces/networkRuleSets\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.EventHub/namespaces/networkRuleSets/publicNetworkAccess\"}]},{\"allOf\":[{\"equals\":\"Microsoft.EventHub/namespaces\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.EventHub/namespaces/publicNetworkAccess\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0602787f-9896-402a-a6e1-39ee63ee435e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0602787f-9896-402a-a6e1-39ee63ee435e\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1658 - Secure Name / Address Resolution Service (Recursive
@@ -22643,7 +22643,7 @@ interactions:
         or disable the execution of the policy\"},\"allowedValues\":[\"Manual\",\"Disabled\"],\"defaultValue\":\"Manual\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"defaultState\":\"Unknown\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ad71d0-52be-6503-4908-e015460a16ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ad71d0-52be-6503-4908-e015460a16ae\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -22957,12 +22957,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1755 - Contacts With Security Groups And Associations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Program Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -23085,7 +23085,7 @@ interactions:
         Databricks Workspaces should have public network access disabled. Disabling
         public network access improves security by ensuring that the resource isn't
         exposed on the public internet. You can limit exposure of your resources by
-        creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/databricks/administration-guide/cloud-configurations/azure/vnet-inject\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure
+        creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/databricks/administration-guide/cloud-configurations/azure/vnet-inject\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure
         Databricks\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Databricks/workspaces\"},{\"field\":\"Microsoft.Databricks/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e7849de-b939-4c50-ab48-fc6b0f5eeba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e7849de-b939-4c50-ab48-fc6b0f5eeba2\"},{\"properties\":{\"displayName\":\"Container
         Apps should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
@@ -23118,7 +23118,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -23173,7 +23173,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Maintain
         data breach records\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_0351
         - Maintain data breach records\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Regulatory
@@ -23381,7 +23381,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -23731,7 +23731,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Organizational
         Users) | Use Of Ficam-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -23843,7 +23843,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Govern
         policies and procedures\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_0292
@@ -23995,7 +23995,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1749 - Mission/Business Process Definition\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -24152,7 +24152,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -24228,7 +24228,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -24382,7 +24382,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Synapse
         Workspaces should use only Azure Active Directory identities for authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
@@ -24409,7 +24409,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -24673,7 +24673,7 @@ interactions:
         Service app slots should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/slots\"},{\"field\":\"Microsoft.Web/sites/slots/virtualNetworkSubnetId\",\"equals\":\"\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24b7a1c6-44fe-40cc-a2e6-242d2ef70e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24b7a1c6-44fe-40cc-a2e6-242d2ef70e98\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -26175,7 +26175,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -26336,7 +26336,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Remote Maintenance | Document Remote Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Regulatory
@@ -26448,7 +26448,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -26508,7 +26508,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -26867,7 +26867,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -27014,7 +27014,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -27207,7 +27207,7 @@ interactions:
         but CMKs are commonly required to meet regulatory compliance standards. Customer-managed
         keys enable the data to be encrypted with an Azure Key Vault key created and
         owned by you, with full control and responsibility, including rotation and
-        management. Learn more at https://docs.microsoft.com/azure/azure-fluid-relay/concepts/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Fluid
+        management. Learn more at https://learn.microsoft.com/azure/azure-fluid-relay/concepts/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Fluid
         Relay\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.FluidRelay/fluidRelayServers\"},{\"field\":\"Microsoft.FluidRelay/fluidRelayServers/encryption.customerManagedKeyEncryption\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46388f67-373c-4018-98d3-2b83172dd13a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46388f67-373c-4018-98d3-2b83172dd13a\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party
@@ -27270,7 +27270,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -27422,7 +27422,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -27633,7 +27633,7 @@ interactions:
         keys, but CMK are commonly required to meet regulatory compliance standards.
         CMK enable the data to be encrypted with an Azure Key Vault key created and
         owned by you. You have full control and responsibility for the key lifecycle,
-        including rotation and management. Learn more at https://docs.microsoft.com/azure/health-bot/cmk\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Health
+        including rotation and management. Learn more at https://learn.microsoft.com/azure/health-bot/cmk\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Health
         Bot\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthBot/healthBots\"},{\"field\":\"Microsoft.HealthBot/healthBots/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d080fa5-a6d2-4f98-ba9c-f482d0d335c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d080fa5-a6d2-4f98-ba9c-f482d0d335c0\"},{\"properties\":{\"displayName\":\"Function
         apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The
@@ -27790,7 +27790,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -27927,7 +27927,7 @@ interactions:
         standards names\",\"description\":\"For all compliance standards, leave it
         empty. For specific compliance standards, enter a list of standards names
         separated by semicolons (';'). Compliance standards names are available through
-        the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance
         control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"],\"defaultValue\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
@@ -28009,7 +28009,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Bot
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"[Preview]:
         Assign Built-In User-Assigned Managed Identity to Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create
@@ -28237,7 +28237,7 @@ interactions:
         DB database accounts should have local authentication methods disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2\"},{\"properties\":{\"displayName\":\"App
         Service apps should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With
@@ -28267,7 +28267,7 @@ interactions:
         Key Vault should have firewall enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         the key vault firewall so that the key vault is not accessible by default
         to any public IPs. You can then configure specific IP ranges to limit access
-        to those networks. Learn more at: https://docs.microsoft.com/azure/key-vault/general/network-security\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Key
+        to those networks. Learn more at: https://learn.microsoft.com/azure/key-vault/general/network-security\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Key
         Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -28484,7 +28484,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Review
         and reevaluate privileges\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_C1207
@@ -28653,7 +28653,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHSMs/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59fee2f4-d439-4f1b-9b9a-982e1474bfd8\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -28875,7 +28875,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -29055,7 +29055,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Container
         registry images should have vulnerability findings resolved","policyType":"BuiltIn","mode":"All","description":"Container
@@ -29309,7 +29309,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.1.0","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.1.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","Audit","deny","Deny","disabled","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -29416,7 +29416,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"3.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine.","portalReview":"true"},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29539,7 +29539,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks.","metadata":{"version":"4.0.1","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks.","metadata":{"version":"4.0.1","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"logAnalyticsWorkspaceResourceId":{"type":"String","metadata":{"displayName":"LogAnalyticsWorkspaceResourceId","description":"Optional
         Log Analytics workspace resource id. If provided, will be used as part of
         the feature configuration. Otherwise, default workspace will be provisioned.
@@ -29598,7 +29598,7 @@ interactions:
         By default the encryptio is done using Service managed keys, customer-managed
         keys enable the data to be encrypted with an Azure Key Vault key created and
         owned by you. You have full control and responsibility for the key lifecycle,
-        including rotation and management. Learn more at https://docs.microsoft.com/azure/load-testing/how-to-configure-customer-managed-keys?tabs=portal.","metadata":{"version":"1.0.0","category":"Azure
+        including rotation and management. Learn more at https://learn.microsoft.com/azure/load-testing/how-to-configure-customer-managed-keys?tabs=portal.","metadata":{"version":"1.0.0","category":"Azure
         Load Testing"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy."},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.LoadTestService/loadtests"},{"field":"Microsoft.LoadTestService/loadTests/encryption.keyUrl","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/65c4f833-1f2e-426c-8780-f6d7593bed7a","type":"Microsoft.Authorization/policyDefinitions","name":"65c4f833-1f2e-426c-8780-f6d7593bed7a"},{"properties":{"displayName":"Update
         rules of behavior and access agreements","policyType":"BuiltIn","mode":"All","description":"CMA_0521
@@ -30034,7 +30034,7 @@ interactions:
         implements this Identification and Authentication control","metadata":{"version":"1.0.1","category":"Regulatory
         Compliance","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304"},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Resources/subscriptions","Microsoft.Resources/subscriptions/resourceGroups"]},{"value":"false","equals":"true"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b","type":"Microsoft.Authorization/policyDefinitions","name":"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b"},{"properties":{"displayName":"Hotpatch
         should be enabled for Windows Server Azure Edition VMs","policyType":"BuiltIn","mode":"Indexed","description":"Minimize
-        reboots and install updates quickly with hotpatch. Learn more at https://docs.microsoft.com/azure/automanage/automanage-hotpatch","metadata":{"version":"1.0.0","category":"Automanage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        reboots and install updates quickly with hotpatch. Learn more at https://learn.microsoft.com/azure/automanage/automanage-hotpatch","metadata":{"version":"1.0.0","category":"Automanage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku","in":["2022-datacenter-azure-edition","2022-datacenter-azure-edition-core","2022-datacenter-azure-edition-core-smalldisk","2022-datacenter-azure-edition-smalldisk"]},{"not":{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.enableHotpatching","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d02d2f7-e38b-4bdc-96f3-adc0a8726abc","type":"Microsoft.Authorization/policyDefinitions","name":"6d02d2f7-e38b-4bdc-96f3-adc0a8726abc"},{"properties":{"displayName":"Microsoft
         Managed Control 1437 - Media Transport | Cryptographic Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Media Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -30389,7 +30389,7 @@ interactions:
         Defender for Cloud extension for Azure Arc provides threat protection for
         your Arc enabled Kubernetes clusters. The extension collects data from all
         nodes in the cluster and sends it to the Azure Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"7.1.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"7.1.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"},"logAnalyticsWorkspaceResourceId":{"type":"String","metadata":{"displayName":"LogAnalyticsWorkspaceResourceId","description":"Optional
         Log Analytics workspace resource id. If provided, will be used as part of
         the feature configuration. Otherwise, default workspace will be provisioned.
@@ -30556,7 +30556,7 @@ interactions:
         Service apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"3.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"3.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -30564,7 +30564,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -30620,7 +30620,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -30717,7 +30717,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -30862,7 +30862,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -30900,7 +30900,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -30944,7 +30944,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Document
         the legal basis for processing personal information","policyType":"BuiltIn","mode":"All","description":"CMA_0206
@@ -31199,7 +31199,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -31935,7 +31935,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - User Identification And Authentication | Network Access
@@ -32136,7 +32136,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -32422,7 +32422,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"Designate
         individuals to fulfill specific roles and responsibilities","policyType":"BuiltIn","mode":"All","description":"CMA_C1747
@@ -32488,7 +32488,7 @@ interactions:
         can raise or lower the minimal TLS version using the API, for both new Synapse
         workspaces or existing workspaces. So users who need to use a lower client
         version in the workspaces can connect while users who has security requirement
-        can raise the minimum TLS version. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.1.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        can raise the minimum TLS version. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.1.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces/dedicatedSQLminimalTlsSettings"},{"field":"Microsoft.Synapse/workspaces/dedicatedSQLminimalTlsSettings/minimalTlsVersion","notEquals":"1.2"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-01'')]","operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/dedicatedSQLminimalTlsSettings/minimalTlsVersion","value":"1.2"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b5c654c-fb07-471b-aa8f-15fea733f140","type":"Microsoft.Authorization/policyDefinitions","name":"8b5c654c-fb07-471b-aa8f-15fea733f140"},{"properties":{"displayName":"Microsoft
         Managed Control 1170 - Penetration Testing","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -32650,7 +32650,7 @@ interactions:
         Defender for Cloud extension for Azure Arc provides threat protection for
         your Arc enabled Kubernetes clusters. The extension collects data from all
         nodes in the cluster and sends it to the Azure Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"6.0.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.","metadata":{"version":"6.0.0-preview","category":"Kubernetes","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notIn":["aks","aks_management","eks","gke"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -32712,8 +32712,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Deliver
         security assessment results","policyType":"BuiltIn","mode":"All","description":"CMA_C1147
@@ -33021,7 +33021,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -33224,7 +33224,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Remove
         or redact any PII","policyType":"BuiltIn","mode":"All","description":"CMA_C1833
         - Remove or redact any PII","metadata":{"version":"1.1.0","category":"Regulatory
@@ -33294,7 +33294,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Microsoft
         Managed Control 1806 - Governance And Privacy Program ","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Accountability, Audit, and Risk Management control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -34184,7 +34184,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks","metadata":{"version":"2.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks","metadata":{"version":"2.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.defender.securityMonitoring.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -34288,7 +34288,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -34401,7 +34401,7 @@ interactions:
         Link Access modes are set on your AMPLS to control whether ingestion and query
         requests from your networks can reach all resources, or only Private Link
         resources (to prevent data exfiltration). Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},{"anyOf":[{"field":"Microsoft.Insights/privateLinkScopes/accessModeSettings.ingestionAccessMode","notEquals":"PrivateOnly"},{"field":"Microsoft.Insights/privateLinkScopes/accessModeSettings.queryAccessMode","notEquals":"PrivateOnly"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a499fed8-bcc8-4195-b154-641f14743757","type":"Microsoft.Authorization/policyDefinitions","name":"a499fed8-bcc8-4195-b154-641f14743757"},{"properties":{"displayName":"App
         Service apps should only be accessible over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use
         of HTTPS ensures server/service authentication and protects data in transit
@@ -34950,7 +34950,7 @@ interactions:
         key vaults to enable firewall","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         the key vault firewall so that the key vault is not accessible by default
         to any public IPs. You can then configure specific IP ranges to limit access
-        to those networks. Learn more at: https://docs.microsoft.com/azure/key-vault/general/network-security","metadata":{"version":"1.1.1","category":"Key
+        to those networks. Learn more at: https://learn.microsoft.com/azure/key-vault/general/network-security","metadata":{"version":"1.1.1","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/f25e0fa2-a7c8-4377-a976-54943a77a395"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac673a9a-f77d-4846-b2d8-a57f8e1c01dc","type":"Microsoft.Authorization/policyDefinitions","name":"ac673a9a-f77d-4846-b2d8-a57f8e1c01dc"},{"properties":{"displayName":"Configure
         Synapse workspaces to have auditing enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
@@ -35415,7 +35415,7 @@ interactions:
         App Service apps to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.1","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.1","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -35639,7 +35639,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -35892,7 +35892,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"Automate
         remote maintenance activities","policyType":"BuiltIn","mode":"All","description":"CMA_C1402
@@ -36446,7 +36446,7 @@ interactions:
         Link Access modes are set on your AMPLS to control whether ingestion and query
         requests from your networks can reach all resources, or only Private Link
         resources (to prevent data exfiltration). Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#private-link-access-modes-private-only-vs-open.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.ingestionAccessMode\",\"notEquals\":\"PrivateOnly\"},{\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.queryAccessMode\",\"notEquals\":\"PrivateOnly\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.ingestionAccessMode\",\"value\":\"PrivateOnly\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Insights/privateLinkScopes/accessModeSettings.queryAccessMode\",\"value\":\"PrivateOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bec5db8e-c4e3-40f9-a545-e0bd00065c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bec5db8e-c4e3-40f9-a545-e0bd00065c82\"},{\"properties\":{\"displayName\":\"Windows
         Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows
         Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit
@@ -36711,7 +36711,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only
@@ -37098,7 +37098,7 @@ interactions:
         Batch accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2022-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c520cefc-285f-40f3-86e2-2efc38ef1f64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c520cefc-285f-40f3-86e2-2efc38ef1f64\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -37646,7 +37646,7 @@ interactions:
         Service Bus should have public network access disabled. Disabling public network
         access improves security by ensuring that the resource isn't exposed on the
         public internet. You can limit exposure of your resources by creating private
-        endpoints instead. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service
+        endpoints instead. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"equals\":\"Microsoft.ServiceBus/namespaces/networkRuleSets\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.ServiceBus/namespaces/networkRuleSets/publicNetworkAccess\"}]},{\"allOf\":[{\"equals\":\"Microsoft.ServiceBus/namespaces\",\"field\":\"type\"},{\"notEquals\":\"Disabled\",\"field\":\"Microsoft.ServiceBus/namespaces/publicNetworkAccess\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbd11fd3-3002-4907-b6c8-579f0e700e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbd11fd3-3002-4907-b6c8-579f0e700e13\"},{\"properties\":{\"displayName\":\"Define
         and document government oversight\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"CMA_C1587
@@ -37815,7 +37815,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -37826,7 +37826,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -37835,7 +37835,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event
         Hub details\",\"description\":\"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -38059,7 +38059,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -38304,7 +38304,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that's enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Azure
         NetApp Files Volumes should not use NFSv3 protocol type\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Disallow
         the use of NFSv3 protocol type to prevent unsecure access to volumes. NFSv4.1
@@ -38616,7 +38616,7 @@ interactions:
         CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your CosmosDB resource so that it's not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Azure
@@ -38720,7 +38720,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos
         DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2021-06-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth\",\"value\":true}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049\"},{\"properties\":{\"displayName\":\"Microsoft
@@ -39547,7 +39547,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -39674,7 +39674,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -39727,7 +39727,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"Audit\",\"deny\",\"Deny\",\"disabled\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -39970,7 +39970,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -40031,7 +40031,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"secondPrivateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second
@@ -40287,7 +40287,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -40320,7 +40320,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Microsoft Defender for Cloud''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Microsoft Defender for Cloud''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -41052,7 +41052,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.1.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.1.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","Audit","deny","Deny","disabled","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Configure
         Function app slots to use the latest TLS version","policyType":"BuiltIn","mode":"Indexed","description":"Periodically,
         newer versions are released for TLS either due to security flaws, include
@@ -41123,7 +41123,7 @@ interactions:
         Service Environment should have internal encryption enabled","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.1","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.1","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Microsoft
         Managed Control 1857 - Privacy Incident Response ","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -41357,7 +41357,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -41368,7 +41368,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -41376,7 +41376,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_default.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_default.yaml
index 545e11b2a34..491fd089175 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_default.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_default.yaml
@@ -2210,7 +2210,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -2364,8 +2364,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -3840,7 +3840,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -4966,7 +4966,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6622,7 +6622,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -9111,7 +9111,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -9265,8 +9265,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -10741,7 +10741,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -11867,7 +11867,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -13523,7 +13523,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -14697,7 +14697,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -14995,7 +14995,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -15210,12 +15210,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -15337,7 +15337,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -15371,7 +15371,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -15528,7 +15528,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -15785,7 +15785,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15861,7 +15861,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15931,7 +15931,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -16059,7 +16059,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -16101,7 +16101,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -16206,7 +16206,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -16216,7 +16216,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -17327,7 +17327,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -17438,7 +17438,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -17511,7 +17511,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -17528,7 +17528,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -17792,7 +17792,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -17905,7 +17905,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -18085,7 +18085,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -18265,7 +18265,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18550,7 +18550,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18645,7 +18645,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -18698,7 +18698,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -18775,7 +18775,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -18935,7 +18935,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -19002,7 +19002,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -19144,7 +19144,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -19284,7 +19284,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -19453,7 +19453,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -19548,7 +19548,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -19607,7 +19607,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -20256,7 +20256,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -20372,7 +20372,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -20380,7 +20380,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -20421,7 +20421,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -20510,7 +20510,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -20625,7 +20625,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -20659,7 +20659,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -20680,7 +20680,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -20822,7 +20822,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -21352,7 +21352,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -21545,7 +21545,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -21766,7 +21766,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -21878,7 +21878,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -21940,8 +21940,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -22246,7 +22246,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -22385,7 +22385,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -22436,7 +22436,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -22967,7 +22967,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -23044,7 +23044,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -23795,7 +23795,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -23951,7 +23951,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -24065,7 +24065,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -24502,7 +24502,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -25231,7 +25231,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -25242,7 +25242,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -25250,7 +25250,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -25399,7 +25399,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25524,7 +25524,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -25704,7 +25704,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -25759,7 +25759,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -26445,7 +26445,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -26551,7 +26551,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -26592,7 +26592,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -26767,7 +26767,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -26815,7 +26815,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -26966,7 +26966,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -26989,7 +26989,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -27474,7 +27474,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -27510,7 +27510,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -27701,7 +27701,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -27712,7 +27712,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -27721,7 +27721,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -32397,7 +32397,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -32695,7 +32695,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -32910,12 +32910,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -33037,7 +33037,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -33071,7 +33071,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -33228,7 +33228,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -33485,7 +33485,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -33561,7 +33561,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -33631,7 +33631,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -33759,7 +33759,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -33801,7 +33801,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -33906,7 +33906,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -33916,7 +33916,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -35027,7 +35027,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -35138,7 +35138,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -35211,7 +35211,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -35228,7 +35228,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -35492,7 +35492,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -35605,7 +35605,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -35785,7 +35785,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -35965,7 +35965,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -36250,7 +36250,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -36345,7 +36345,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -36398,7 +36398,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -36475,7 +36475,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -36635,7 +36635,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -36702,7 +36702,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -36844,7 +36844,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -36984,7 +36984,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -37153,7 +37153,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -37248,7 +37248,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -37307,7 +37307,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -37956,7 +37956,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -38072,7 +38072,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -38080,7 +38080,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -38121,7 +38121,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -38210,7 +38210,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -38325,7 +38325,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -38359,7 +38359,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38380,7 +38380,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -38522,7 +38522,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -39052,7 +39052,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -39245,7 +39245,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -39466,7 +39466,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -39578,7 +39578,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -39640,8 +39640,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -39946,7 +39946,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -40085,7 +40085,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -40136,7 +40136,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -40667,7 +40667,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -40744,7 +40744,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -41495,7 +41495,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -41651,7 +41651,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -41765,7 +41765,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -42202,7 +42202,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -42931,7 +42931,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -42942,7 +42942,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -42950,7 +42950,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -43099,7 +43099,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -43224,7 +43224,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -43404,7 +43404,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -43459,7 +43459,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -44145,7 +44145,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -44251,7 +44251,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -44292,7 +44292,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -44467,7 +44467,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -44515,7 +44515,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -44666,7 +44666,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -44689,7 +44689,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -45174,7 +45174,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -45210,7 +45210,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -45401,7 +45401,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -45412,7 +45412,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -45421,7 +45421,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_management_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_management_group.yaml
index f2969bddfb7..35899fe3da0 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_management_group.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_management_group.yaml
@@ -2484,7 +2484,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -2638,8 +2638,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -4114,7 +4114,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -5240,7 +5240,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6896,7 +6896,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -9083,7 +9083,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -9237,8 +9237,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -10713,7 +10713,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -11839,7 +11839,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -13495,7 +13495,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -14367,7 +14367,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -14665,7 +14665,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -14880,12 +14880,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -15007,7 +15007,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -15041,7 +15041,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -15198,7 +15198,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -15455,7 +15455,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15531,7 +15531,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15601,7 +15601,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -15729,7 +15729,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -15771,7 +15771,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -15876,7 +15876,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -15886,7 +15886,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -16997,7 +16997,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -17108,7 +17108,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -17181,7 +17181,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -17198,7 +17198,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -17462,7 +17462,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -17575,7 +17575,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -17755,7 +17755,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -17937,7 +17937,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18222,7 +18222,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18317,7 +18317,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -18370,7 +18370,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -18447,7 +18447,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -18607,7 +18607,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -18674,7 +18674,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -18816,7 +18816,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -18956,7 +18956,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -19125,7 +19125,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -19220,7 +19220,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -19279,7 +19279,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -19928,7 +19928,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -20044,7 +20044,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -20052,7 +20052,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -20093,7 +20093,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -20182,7 +20182,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -20297,7 +20297,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -20331,7 +20331,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -20352,7 +20352,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -20494,7 +20494,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -21024,7 +21024,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -21217,7 +21217,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -21438,7 +21438,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -21550,7 +21550,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -21612,8 +21612,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -21920,7 +21920,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -22059,7 +22059,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -22110,7 +22110,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -22641,7 +22641,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -22718,7 +22718,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -23469,7 +23469,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -23625,7 +23625,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -23739,7 +23739,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -24176,7 +24176,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -24905,7 +24905,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -24916,7 +24916,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -24924,7 +24924,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -25073,7 +25073,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25198,7 +25198,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -25378,7 +25378,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -25433,7 +25433,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -26122,7 +26122,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"[Preview]:
@@ -26229,7 +26229,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26269,7 +26269,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -26442,7 +26442,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26490,7 +26490,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26637,7 +26637,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26660,7 +26660,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -27140,7 +27140,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -27176,7 +27176,7 @@ interactions:
         Service Environment should enable internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade
@@ -27363,7 +27363,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -27374,7 +27374,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -27382,7 +27382,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
@@ -28755,7 +28755,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -29053,7 +29053,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -29268,12 +29268,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -29395,7 +29395,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -29429,7 +29429,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -29586,7 +29586,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -29843,7 +29843,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -29919,7 +29919,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -29989,7 +29989,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -30117,7 +30117,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -30159,7 +30159,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -30264,7 +30264,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -30274,7 +30274,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -31385,7 +31385,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -31496,7 +31496,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -31569,7 +31569,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -31586,7 +31586,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -31850,7 +31850,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -31963,7 +31963,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -32143,7 +32143,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -32325,7 +32325,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32610,7 +32610,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32705,7 +32705,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -32758,7 +32758,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -32835,7 +32835,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -32995,7 +32995,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -33062,7 +33062,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -33204,7 +33204,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -33344,7 +33344,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -33513,7 +33513,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -33608,7 +33608,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -33667,7 +33667,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -34316,7 +34316,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -34432,7 +34432,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -34440,7 +34440,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -34481,7 +34481,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -34570,7 +34570,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -34685,7 +34685,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -34719,7 +34719,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -34740,7 +34740,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -34882,7 +34882,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -35412,7 +35412,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -35605,7 +35605,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -35826,7 +35826,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -35938,7 +35938,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -36000,8 +36000,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -36308,7 +36308,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -36447,7 +36447,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -36498,7 +36498,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -37029,7 +37029,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -37106,7 +37106,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -37857,7 +37857,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38013,7 +38013,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38127,7 +38127,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -38564,7 +38564,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -39293,7 +39293,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -39304,7 +39304,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -39312,7 +39312,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -39461,7 +39461,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -39586,7 +39586,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -39766,7 +39766,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -39821,7 +39821,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -40510,7 +40510,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"[Preview]:
@@ -40617,7 +40617,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -40657,7 +40657,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -40830,7 +40830,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -40878,7 +40878,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -41025,7 +41025,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -41048,7 +41048,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -41528,7 +41528,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -41564,7 +41564,7 @@ interactions:
         Service Environment should enable internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade
@@ -41751,7 +41751,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -41762,7 +41762,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -41770,7 +41770,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_subscription.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_subscription.yaml
index 843b244b922..321519bf424 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_subscription.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyexemption_subscription.yaml
@@ -1638,7 +1638,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -3178,7 +3178,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -4301,7 +4301,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -5012,7 +5012,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6434,7 +6434,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -7974,7 +7974,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -9097,7 +9097,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -9808,7 +9808,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -10309,7 +10309,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -10596,7 +10596,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -10791,12 +10791,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -10920,7 +10920,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -10954,7 +10954,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},{\"count\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -11099,7 +11099,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -11467,7 +11467,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -11588,7 +11588,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -11618,7 +11618,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -11712,7 +11712,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -12726,7 +12726,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -12837,7 +12837,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12910,7 +12910,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -12927,7 +12927,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -13185,7 +13185,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -13298,7 +13298,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -13453,7 +13453,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -13585,7 +13585,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -13857,7 +13857,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -13939,7 +13939,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -13986,7 +13986,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -14056,7 +14056,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -14178,7 +14178,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -14362,7 +14362,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -14481,7 +14481,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -14649,7 +14649,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -14728,7 +14728,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.0.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -15386,7 +15386,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift","rancher_rke","tkg"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -15502,7 +15502,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -15510,7 +15510,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -15547,7 +15547,7 @@ interactions:
         workflow automation are created.","strongType":"location"}},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -15631,7 +15631,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -15739,7 +15739,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Microsoft
         Managed Control 1258 - Contingency Training","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -15758,7 +15758,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -15779,7 +15779,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -15906,7 +15906,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -16586,7 +16586,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -16778,7 +16778,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -16881,7 +16881,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"2.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"2.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift","rancher_rke","tkg"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -17186,7 +17186,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -17307,7 +17307,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -17351,7 +17351,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -17965,7 +17965,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -18616,7 +18616,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18767,7 +18767,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -18872,7 +18872,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -19253,7 +19253,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -19963,7 +19963,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -19974,7 +19974,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -19982,7 +19982,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -20227,7 +20227,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -20398,7 +20398,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -20453,7 +20453,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -21058,7 +21058,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"Vulnerabilities
@@ -21159,7 +21159,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -21199,7 +21199,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -21349,7 +21349,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -21397,7 +21397,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -21573,7 +21573,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -21592,7 +21592,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -22059,7 +22059,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -22095,7 +22095,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -22243,7 +22243,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -22254,7 +22254,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -22263,7 +22263,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -23739,7 +23739,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -24026,7 +24026,7 @@ interactions:
         to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"],\"defaultValue\":\"false\"}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -24221,12 +24221,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -24350,7 +24350,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -24384,7 +24384,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},{\"count\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -24529,7 +24529,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -24897,7 +24897,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -25018,7 +25018,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -25048,7 +25048,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -25142,7 +25142,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -26156,7 +26156,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -26267,7 +26267,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -26340,7 +26340,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -26357,7 +26357,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -26615,7 +26615,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -26728,7 +26728,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -26883,7 +26883,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -27015,7 +27015,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -27287,7 +27287,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -27369,7 +27369,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -27416,7 +27416,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -27486,7 +27486,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -27608,7 +27608,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -27792,7 +27792,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -27911,7 +27911,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -28079,7 +28079,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -28158,7 +28158,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.0.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -28816,7 +28816,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift","rancher_rke","tkg"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -28932,7 +28932,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -28940,7 +28940,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -28977,7 +28977,7 @@ interactions:
         workflow automation are created.","strongType":"location"}},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -29061,7 +29061,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -29169,7 +29169,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Microsoft
         Managed Control 1258 - Contingency Training","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -29188,7 +29188,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29209,7 +29209,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -29336,7 +29336,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -30016,7 +30016,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -30208,7 +30208,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -30311,7 +30311,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"2.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"2.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift","rancher_rke","tkg"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -30616,7 +30616,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -30737,7 +30737,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -30781,7 +30781,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -31395,7 +31395,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -32046,7 +32046,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32197,7 +32197,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32302,7 +32302,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -32683,7 +32683,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -33393,7 +33393,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -33404,7 +33404,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -33412,7 +33412,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -33657,7 +33657,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -33828,7 +33828,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -33883,7 +33883,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -34488,7 +34488,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"Vulnerabilities
@@ -34589,7 +34589,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -34629,7 +34629,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -34779,7 +34779,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -34827,7 +34827,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -35003,7 +35003,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -35022,7 +35022,7 @@ interactions:
         group location\",\"description\":\"The location where the resource group and
         the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -35489,7 +35489,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -35525,7 +35525,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -35673,7 +35673,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -35684,7 +35684,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -35693,7 +35693,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_default.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_default.yaml
index 03e1cfb6720..a8ea195fe7e 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_default.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_default.yaml
@@ -1647,7 +1647,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -1801,8 +1801,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -3277,7 +3277,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -4403,7 +4403,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6059,7 +6059,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -9074,7 +9074,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -9228,8 +9228,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -10704,7 +10704,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -11830,7 +11830,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -13486,7 +13486,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -16095,7 +16095,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -16249,8 +16249,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -17725,7 +17725,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -18851,7 +18851,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -20507,7 +20507,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -21681,7 +21681,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -21979,7 +21979,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -22194,12 +22194,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -22321,7 +22321,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -22355,7 +22355,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -22512,7 +22512,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -22769,7 +22769,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -22845,7 +22845,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -22915,7 +22915,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -23043,7 +23043,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -23085,7 +23085,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -23190,7 +23190,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -23200,7 +23200,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -24311,7 +24311,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -24422,7 +24422,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -24495,7 +24495,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -24512,7 +24512,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -24776,7 +24776,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -24889,7 +24889,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -25069,7 +25069,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -25249,7 +25249,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25534,7 +25534,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25629,7 +25629,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -25682,7 +25682,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -25759,7 +25759,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -25919,7 +25919,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -25986,7 +25986,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -26128,7 +26128,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -26268,7 +26268,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -26437,7 +26437,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -26532,7 +26532,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26591,7 +26591,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -27240,7 +27240,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -27356,7 +27356,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -27364,7 +27364,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -27405,7 +27405,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -27494,7 +27494,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -27609,7 +27609,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -27643,7 +27643,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -27664,7 +27664,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -27806,7 +27806,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -28336,7 +28336,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -28529,7 +28529,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -28750,7 +28750,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -28862,7 +28862,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -28924,8 +28924,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -29230,7 +29230,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29369,7 +29369,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -29420,7 +29420,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -29951,7 +29951,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -30028,7 +30028,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -30779,7 +30779,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -30935,7 +30935,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -31049,7 +31049,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -31486,7 +31486,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -32215,7 +32215,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -32226,7 +32226,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -32234,7 +32234,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -32383,7 +32383,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32508,7 +32508,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -32688,7 +32688,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -32743,7 +32743,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -33429,7 +33429,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -33535,7 +33535,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -33576,7 +33576,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -33751,7 +33751,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -33799,7 +33799,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -33950,7 +33950,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -33973,7 +33973,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -34458,7 +34458,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -34494,7 +34494,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -34685,7 +34685,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -34696,7 +34696,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -34705,7 +34705,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -39381,7 +39381,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -39679,7 +39679,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -39894,12 +39894,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -40021,7 +40021,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -40055,7 +40055,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -40212,7 +40212,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -40469,7 +40469,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -40545,7 +40545,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -40615,7 +40615,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -40743,7 +40743,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -40785,7 +40785,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -40890,7 +40890,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -40900,7 +40900,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -42011,7 +42011,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -42122,7 +42122,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -42195,7 +42195,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -42212,7 +42212,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -42476,7 +42476,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -42589,7 +42589,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -42769,7 +42769,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -42949,7 +42949,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -43234,7 +43234,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -43329,7 +43329,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -43382,7 +43382,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -43459,7 +43459,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -43619,7 +43619,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -43686,7 +43686,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -43828,7 +43828,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -43968,7 +43968,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -44137,7 +44137,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -44232,7 +44232,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -44291,7 +44291,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -44940,7 +44940,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -45056,7 +45056,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -45064,7 +45064,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -45105,7 +45105,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -45194,7 +45194,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -45309,7 +45309,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -45343,7 +45343,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -45364,7 +45364,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -45506,7 +45506,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -46036,7 +46036,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -46229,7 +46229,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -46450,7 +46450,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -46562,7 +46562,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -46624,8 +46624,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -46930,7 +46930,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -47069,7 +47069,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -47120,7 +47120,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -47651,7 +47651,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -47728,7 +47728,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -48479,7 +48479,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -48635,7 +48635,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -48749,7 +48749,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -49186,7 +49186,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -49915,7 +49915,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -49926,7 +49926,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -49934,7 +49934,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -50083,7 +50083,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -50208,7 +50208,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -50388,7 +50388,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -50443,7 +50443,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -51129,7 +51129,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -51235,7 +51235,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -51276,7 +51276,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -51451,7 +51451,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -51499,7 +51499,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -51650,7 +51650,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -51673,7 +51673,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -52158,7 +52158,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -52194,7 +52194,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -52385,7 +52385,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -52396,7 +52396,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -52405,7 +52405,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_grouping.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_grouping.yaml
index e4eb46a4459..a0d8c5f377e 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_grouping.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_grouping.yaml
@@ -1701,7 +1701,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -1855,8 +1855,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -3331,7 +3331,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -4457,7 +4457,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6113,7 +6113,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_management_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_management_group.yaml
index 31a8803f024..04a6e696325 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_management_group.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_management_group.yaml
@@ -1903,7 +1903,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -2057,8 +2057,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -3533,7 +3533,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -4659,7 +4659,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6315,7 +6315,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -8502,7 +8502,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -8656,8 +8656,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -10132,7 +10132,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -11258,7 +11258,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -12914,7 +12914,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -15221,7 +15221,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -15375,8 +15375,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -16851,7 +16851,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -17977,7 +17977,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -19633,7 +19633,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -20505,7 +20505,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -20803,7 +20803,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -21018,12 +21018,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -21145,7 +21145,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -21179,7 +21179,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -21336,7 +21336,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -21593,7 +21593,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -21669,7 +21669,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -21739,7 +21739,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -21867,7 +21867,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -21909,7 +21909,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -22014,7 +22014,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -22024,7 +22024,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -23135,7 +23135,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -23246,7 +23246,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -23319,7 +23319,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -23336,7 +23336,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -23600,7 +23600,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -23713,7 +23713,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -23893,7 +23893,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -24075,7 +24075,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -24360,7 +24360,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -24455,7 +24455,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -24508,7 +24508,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -24585,7 +24585,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -24745,7 +24745,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -24812,7 +24812,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -24954,7 +24954,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -25094,7 +25094,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -25263,7 +25263,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -25358,7 +25358,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25417,7 +25417,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -26066,7 +26066,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -26182,7 +26182,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -26190,7 +26190,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -26231,7 +26231,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -26320,7 +26320,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -26435,7 +26435,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -26469,7 +26469,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26490,7 +26490,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -26632,7 +26632,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -27162,7 +27162,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -27355,7 +27355,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -27576,7 +27576,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -27688,7 +27688,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -27750,8 +27750,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -28058,7 +28058,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -28197,7 +28197,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -28248,7 +28248,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -28779,7 +28779,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -28856,7 +28856,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -29607,7 +29607,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29763,7 +29763,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29877,7 +29877,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -30314,7 +30314,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -31043,7 +31043,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -31054,7 +31054,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -31062,7 +31062,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -31211,7 +31211,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -31336,7 +31336,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -31516,7 +31516,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -31571,7 +31571,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -32260,7 +32260,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"[Preview]:
@@ -32367,7 +32367,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32407,7 +32407,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -32580,7 +32580,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32628,7 +32628,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32775,7 +32775,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32798,7 +32798,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -33278,7 +33278,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -33314,7 +33314,7 @@ interactions:
         Service Environment should enable internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade
@@ -33501,7 +33501,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -33512,7 +33512,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -33520,7 +33520,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
@@ -34883,7 +34883,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -35181,7 +35181,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -35396,12 +35396,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -35523,7 +35523,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -35557,7 +35557,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -35714,7 +35714,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -35971,7 +35971,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -36047,7 +36047,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -36117,7 +36117,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -36245,7 +36245,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -36287,7 +36287,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -36392,7 +36392,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -36402,7 +36402,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -37513,7 +37513,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -37624,7 +37624,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -37697,7 +37697,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -37714,7 +37714,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -37978,7 +37978,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -38091,7 +38091,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -38271,7 +38271,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -38453,7 +38453,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38738,7 +38738,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38833,7 +38833,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -38886,7 +38886,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -38963,7 +38963,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -39123,7 +39123,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -39190,7 +39190,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -39332,7 +39332,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -39472,7 +39472,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -39641,7 +39641,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -39736,7 +39736,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -39795,7 +39795,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -40444,7 +40444,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -40560,7 +40560,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -40568,7 +40568,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -40609,7 +40609,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -40698,7 +40698,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -40813,7 +40813,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -40847,7 +40847,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -40868,7 +40868,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -41010,7 +41010,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -41540,7 +41540,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -41733,7 +41733,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -41954,7 +41954,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -42066,7 +42066,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -42128,8 +42128,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -42436,7 +42436,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -42575,7 +42575,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -42626,7 +42626,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -43157,7 +43157,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -43234,7 +43234,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -43985,7 +43985,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -44141,7 +44141,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -44255,7 +44255,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -44692,7 +44692,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -45421,7 +45421,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -45432,7 +45432,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -45440,7 +45440,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -45589,7 +45589,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -45714,7 +45714,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -45894,7 +45894,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -45949,7 +45949,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -46638,7 +46638,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"[Preview]:
@@ -46745,7 +46745,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -46785,7 +46785,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -46958,7 +46958,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -47006,7 +47006,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -47153,7 +47153,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -47176,7 +47176,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -47656,7 +47656,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -47692,7 +47692,7 @@ interactions:
         Service Environment should enable internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade
@@ -47879,7 +47879,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -47890,7 +47890,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -47898,7 +47898,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_subscription_id.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_subscription_id.yaml
index 749814534b9..c31628a9610 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_subscription_id.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_resource_policyset_subscription_id.yaml
@@ -1649,7 +1649,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -1803,8 +1803,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -3279,7 +3279,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -4405,7 +4405,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -6061,7 +6061,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -8273,7 +8273,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -8427,8 +8427,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -9903,7 +9903,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -11029,7 +11029,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -12685,7 +12685,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -15017,7 +15017,7 @@ interactions:
         provides an encrypted connection, using passwords with SSH still leaves the
         VM vulnerable to brute-force attacks. The most secure option for authenticating
         to an Azure Linux virtual machine over SSH is with a public-private key pair,
-        also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
+        also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","description":"Private
         endpoint connections enforce secure communication by enabling private connectivity
         to Azure SQL Database."},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"},"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect":{"type":"String","metadata":{"displayName":"Public
@@ -15171,8 +15171,8 @@ interactions:
         protection health issues should be resolved on your machines","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection."},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyDefinitions":[{"policyDefinitionReferenceId":"useServicePrincipalToProtectSubscriptionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","parameters":{"effect":{"value":"[parameters(''useServicePrincipalToProtectSubscriptionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"installLogAnalyticsAgentOnVmssMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","parameters":{"effect":{"value":"[parameters(''installLogAnalyticsAgentOnVmssMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"certificatesValidityPeriodMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","parameters":{"effect":{"value":"[parameters(''certificatesValidityPeriodMonitoringEffect'')]"},"maximumValidityInMonths":{"value":"[parameters(''certificatesValidityPeriodInMonths'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-7"]},{"policyDefinitionReferenceId":"secretsExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37","parameters":{"effect":{"value":"[parameters(''secretsExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"keysExpirationSet","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0","parameters":{"effect":{"value":"[parameters(''keysExpirationSetEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-6"]},{"policyDefinitionReferenceId":"vmssOsVulnerabilitiesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","parameters":{"effect":{"value":"[parameters(''vmssOsVulnerabilitiesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"vmssEndpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","parameters":{"effect":{"value":"[parameters(''vmssEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"vmssSystemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","parameters":{"effect":{"value":"[parameters(''vmssSystemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"gcExtOnVMMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","parameters":{"effect":{"value":"[parameters(''azurePolicyforWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"gcExtOnVMWithNoSAMIMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","parameters":{"effect":{"value":"[parameters(''gcExtOnVMWithNoSAMIMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3","Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"windowsDefenderExploitGuardMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","parameters":{"effect":{"value":"[parameters(''windowsDefenderExploitGuardMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"NotAvailableMachineState":{"value":"Compliant"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"windowsGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","parameters":{"effect":{"value":"[parameters(''windowsGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"linuxGuestConfigBaselinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","parameters":{"effect":{"value":"[parameters(''linuxGuestConfigBaselinesMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"diagnosticsLogsInIoTHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInIoTHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInIoTHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceFabricMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"disableUnrestrictedNetworkToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","parameters":{"effect":{"value":"[parameters(''disableUnrestrictedNetworkToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"useRbacRulesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","parameters":{"effect":{"value":"[parameters(''useRbacRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"diagnosticsLogsInStreamAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInStreamAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"secureTransferToStorageAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","parameters":{"effect":{"value":"[parameters(''secureTransferToStorageAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"aadAuthenticationInSqlServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInSqlServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInServiceBusMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInServiceBusMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInServiceBusRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"clusterProtectionLevelInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","parameters":{"effect":{"value":"[parameters(''clusterProtectionLevelInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"aadAuthenticationInServiceFabricMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","parameters":{"effect":{"value":"[parameters(''aadAuthenticationInServiceFabricMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-1"]},{"policyDefinitionReferenceId":"diagnosticsLogsInSearchServiceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInSearchServiceMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInSearchServiceRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInRedisCacheMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInRedisCacheMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInLogicAppsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInLogicAppsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInLogicAppsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKeyVaultMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKeyVaultMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKeyVaultRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInEventHubMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInEventHubMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInEventHubRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeStoreMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeStoreRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInDataLakeAnalyticsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInDataLakeAnalyticsRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"classicStorageAccountsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","parameters":{"effect":{"value":"[parameters(''classicStorageAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"classicComputeVMsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","parameters":{"effect":{"value":"[parameters(''classicComputeVMsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-2"]},{"policyDefinitionReferenceId":"diagnosticsLogsInBatchAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInBatchAccountMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInBatchAccountRetentionDays'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"encryptionOfAutomationAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","parameters":{"effect":{"value":"[parameters(''encryptionOfAutomationAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlDbEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","parameters":{"effect":{"value":"[parameters(''sqlDbEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"sqlServerAuditingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","parameters":{"effect":{"value":"[parameters(''sqlServerAuditingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"systemUpdatesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","parameters":{"effect":{"value":"[parameters(''systemUpdatesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"jitNetworkAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","parameters":{"effect":{"value":"[parameters(''jitNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3","Azure_Security_Benchmark_v3.0_PA-2"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"adaptiveApplicationControlsUpdateMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","parameters":{"effect":{"value":"[parameters(''adaptiveApplicationControlsUpdateMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_AM-5"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnSubnetsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnSubnetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"networkSecurityGroupsOnInternalVirtualMachinesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","parameters":{"effect":{"value":"[parameters(''networkSecurityGroupsOnInternalVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"systemConfigurationsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","parameters":{"effect":{"value":"[parameters(''systemConfigurationsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"endpointProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","parameters":{"effect":{"value":"[parameters(''endpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"diskEncryptionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","parameters":{"effect":{"value":"[parameters(''diskEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-4"]},{"policyDefinitionReferenceId":"serverVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","parameters":{"effect":{"value":"[parameters(''serverVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"nextGenerationFirewallMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","parameters":{"effect":{"value":"[parameters(''nextGenerationFirewallMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1"]},{"policyDefinitionReferenceId":"sqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","parameters":{"effect":{"value":"[parameters(''sqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"serverSqlDbVulnerabilityAssesmentMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","parameters":{"effect":{"value":"[parameters(''serverSqlDbVulnerabilityAssesmentMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"sqlDbDataClassificationMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","parameters":{"effect":{"value":"[parameters(''sqlDbDataClassificationMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-1"]},{"policyDefinitionReferenceId":"identityDesignateLessThanOwnersMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","parameters":{"effect":{"value":"[parameters(''identityDesignateLessThanOwnersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityDesignateMoreThanOneOwnerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","parameters":{"effect":{"value":"[parameters(''identityDesignateMoreThanOneOwnerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1"]},{"policyDefinitionReferenceId":"identityEnableMFAForOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityEnableMFAForReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","parameters":{"effect":{"value":"[parameters(''identityEnableMFAForReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveDeprecatedAccountMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","parameters":{"effect":{"value":"[parameters(''identityRemoveDeprecatedAccountMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithOwnerPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-1","Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithWritePermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithWritePermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"identityRemoveExternalAccountWithReadPermissionsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","parameters":{"effect":{"value":"[parameters(''identityRemoveExternalAccountWithReadPermissionsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-4"]},{"policyDefinitionReferenceId":"apiAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","parameters":{"effect":{"value":"[parameters(''apiAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","parameters":{"effect":{"value":"[parameters(''functionAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppDisableRemoteDebuggingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","parameters":{"effect":{"value":"[parameters(''webAppDisableRemoteDebuggingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"apiAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","parameters":{"effect":{"value":"[parameters(''apiAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","parameters":{"effect":{"value":"[parameters(''functionAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"webAppEnforceHttpsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","parameters":{"effect":{"value":"[parameters(''webAppEnforceHttpsMonitoringEffectV2'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"apiAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","parameters":{"effect":{"value":"[parameters(''apiAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"functionAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","parameters":{"effect":{"value":"[parameters(''functionAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"webAppRestrictCORSAccessMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","parameters":{"effect":{"value":"[parameters(''webAppRestrictCORSAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"vnetEnableDDoSProtectionMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","parameters":{"effect":{"value":"[parameters(''vnetEnableDDoSProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-5"]},{"policyDefinitionReferenceId":"sqlServerAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","parameters":{"effect":{"value":"[parameters(''sqlServerAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlManagedInstanceAdvancedDataSecurityMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","parameters":{"effect":{"value":"[parameters(''sqlManagedInstanceAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceRbacEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","parameters":{"effect":{"value":"[parameters(''kubernetesServiceRbacEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PA-7"]},{"policyDefinitionReferenceId":"kubernetesServiceAuthorizedIPRangesEnabledMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAuthorizedIPRangesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnServerMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnServerMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"vulnerabilityAssessmentOnManagedInstanceMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","parameters":{"effect":{"value":"[parameters(''vulnerabilityAssessmentOnManagedInstanceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-5"]},{"policyDefinitionReferenceId":"adaptiveNetworkHardeningsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","parameters":{"effect":{"value":"[parameters(''adaptiveNetworkHardeningsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-1","Azure_Security_Benchmark_v3.0_NS-7"]},{"policyDefinitionReferenceId":"restrictAccessToManagementPortsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","parameters":{"effect":{"value":"[parameters(''restrictAccessToManagementPortsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"disableIPForwardingMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","parameters":{"effect":{"value":"[parameters(''disableIPForwardingMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ensureServerTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","parameters":{"effect":{"value":"[parameters(''ensureServerTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","parameters":{"effect":{"value":"[parameters(''ensureManagedInstanceTDEIsEncryptedWithYourOwnKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerBenchmarkMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","parameters":{"effect":{"value":"[parameters(''containerBenchmarkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditWindowsEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditWindowsEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"ASCDependencyAgentAuditLinuxEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","parameters":{"effect":{"value":"[parameters(''ASCDependencyAgentAuditLinuxEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-4"]},{"policyDefinitionReferenceId":"AzureFirewallEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","parameters":{"effect":{"value":"[parameters(''AzureFirewallEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-3"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcWindowsMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4078e558-bda6-41fb-9b3c-361e8875200d","parameters":{"effect":{"value":"[parameters(''ArcWindowsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"ArcLinuxMonitoringByGC","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","parameters":{"effect":{"value":"[parameters(''ArcLinuxMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"keyVaultsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","parameters":{"effect":{"value":"[parameters(''keyVaultsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","parameters":{"effect":{"value":"[parameters(''sqlServersAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","parameters":{"effect":{"value":"[parameters(''sqlServersVirtualMachinesAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"storageAccountsAdvancedDataSecurityMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","parameters":{"effect":{"value":"[parameters(''storageAccountsAdvancedDataSecurityMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"appServicesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","parameters":{"effect":{"value":"[parameters(''appServicesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"containerRegistryAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","parameters":{"effect":{"value":"[parameters(''containerRegistryAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"kubernetesServiceAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","parameters":{"effect":{"value":"[parameters(''kubernetesServiceAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"virtualMachinesAdvancedThreatProtectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","parameters":{"effect":{"value":"[parameters(''virtualMachinesAdvancedThreatProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_ES-1","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"azurePolicyAddonStatus","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","parameters":{"effect":{"value":"[parameters(''azurePolicyAddonStatusEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ensureAllowedContainerImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/febd0533-8e55-448f-b837-bd0e06f16469","parameters":{"effect":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterEffect'')]"},"allowedContainerImagesRegex":{"value":"[parameters(''allowedContainerImagesInKubernetesClusterRegex'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerImagesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"privilegedContainersShouldBeAvoided","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4","parameters":{"effect":{"value":"[parameters(''privilegedContainersShouldBeAvoidedEffect'')]"},"excludedNamespaces":{"value":"[parameters(''privilegedContainerNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedContainerPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/440b515e-a580-421e-abeb-b159a61ddcbc","parameters":{"effect":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterEffect'')]"},"allowedContainerPortsList":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedContainerPortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"allowedServicePortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/233a2a17-77ca-4fb1-9b6b-69223d272a44","parameters":{"effect":{"value":"[parameters(''allowedServicePortsInKubernetesClusterEffect'')]"},"allowedServicePortsList":{"value":"[parameters(''allowedservicePortsInKubernetesClusterPorts'')]"},"excludedNamespaces":{"value":"[parameters(''allowedServicePortsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"BlockVulnerableImagesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/13cd7ae3-5bc0-4ac4-a62d-4f7c120b9759","parameters":{"effect":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''BlockVulnerableImagesInKubernetesClusterNamespaceExclusion'')]"},"namespaces":{"value":"[parameters(''BlockVulnerableImagesNamespaces'')]"},"excludedImages":{"value":"[parameters(''BlockVulnerableImagesExcludedImages'')]"},"severityThresholdForExcludingNotPatchableFindings":{"value":"[parameters(''BlockVulnerableImagesSeverityThresholdForExcludingNotPatchableFindings'')]"},"excludeFindingIDs":{"value":"[parameters(''BlockVulnerableImagesExcludeFindingIDs'')]"},"severity":{"value":"[parameters(''severity'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"memoryAndCPULimitsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e345eecc-fa47-480f-9e88-67dcc122b164","parameters":{"effect":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterEffect'')]"},"cpuLimit":{"value":"[parameters(''CPUInKubernetesClusterLimit'')]"},"memoryLimit":{"value":"[parameters(''memoryInKubernetesClusterLimit'')]"},"excludedNamespaces":{"value":"[parameters(''memoryAndCPULimitsInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"MustRunAsNonRoot","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f06ddb64-5fa3-4b77-b166-acb36f7f6042","parameters":{"effect":{"value":"[parameters(''MustRunAsNonRootNamespaceEffect'')]"},"runAsUserRule":{"value":"MustRunAsNonRoot"},"runAsUserRanges":{"value":{"ranges":[]}},"runAsGroupRule":{"value":"MayRunAs"},"runAsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"supplementalGroupsRule":{"value":"MayRunAs"},"supplementalGroupsRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"fsGroupRule":{"value":"MayRunAs"},"fsGroupRanges":{"value":{"ranges":[{"min":1,"max":65535}]}},"excludedNamespaces":{"value":"[parameters(''MustRunAsNonRootNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","parameters":{"effect":{"value":"[parameters(''arcEnabledKubernetesClustersShouldHaveAzureDefendersExtensionInstalled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","parameters":{"effect":{"value":"[parameters(''azureKubernetesServiceClustersShouldHaveSecurityProfileEnabled'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2"]},{"policyDefinitionReferenceId":"containerRegistryVulnerabilityAssessment","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","parameters":{"effect":{"value":"[parameters(''containerRegistryVulnerabilityAssessmentEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6","Azure_Security_Benchmark_v3.0_DS-6"]},{"policyDefinitionReferenceId":"NoPrivilegeEscalationInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99","parameters":{"effect":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoPrivilegeEscalationInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"NoSharingSensitiveHostNamespacesInKubernetes","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8","parameters":{"effect":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesEffect'')]"},"excludedNamespaces":{"value":"[parameters(''NoSharingSensitiveHostNamespacesInKubernetesNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"ReadOnlyRootFileSystemInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80","parameters":{"effect":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''ReadOnlyRootFileSystemInKubernetesClusterNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedCapabilitiesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c","parameters":{"effect":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterNamespaceExclusion'')]"},"allowedCapabilities":{"value":"[parameters(''AllowedCapabilitiesInKubernetesClusterList'')]"},"requiredDropCapabilities":{"value":"[parameters(''DropCapabilitiesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedAppArmorProfilesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/511f5417-5d12-434d-ab2e-816901e72a5e","parameters":{"effect":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterNamespaceExclusion'')]"},"allowedProfiles":{"value":"[parameters(''AllowedAppArmorProfilesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostNetworkingAndPortsInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82985f06-dc18-4a48-bc1c-b9f4f0098cfe","parameters":{"effect":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostNetworkingAndPortsInKubernetesClusterNamespaceExclusion'')]"},"allowHostNetwork":{"value":"[parameters(''AllowHostNetworkingInKubernetesCluster'')]"},"minPort":{"value":"[parameters(''AllowedHostMinPortInKubernetesCluster'')]"},"maxPort":{"value":"[parameters(''AllowedHostMaxPortInKubernetesCluster'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"AllowedHostPathVolumesInKubernetesCluster","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75","parameters":{"effect":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterEffect'')]"},"excludedNamespaces":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterNamespaceExclusion'')]"},"allowedHostPaths":{"value":"[parameters(''AllowedHostPathVolumesInKubernetesClusterList'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"StorageDisallowPublicAccess","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","parameters":{"effect":{"value":"[parameters(''disallowPublicBlobAccessEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","parameters":{"effect":{"value":"[parameters(''azureBackupShouldBeEnabledForVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMariadbMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForPostgresqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","parameters":{"effect":{"value":"[parameters(''ensureWEBAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","parameters":{"effect":{"value":"[parameters(''georedundantBackupShouldBeEnabledForAzureDatabaseForMysqlMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_BR-1","Azure_Security_Benchmark_v3.0_BR-2"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"resourceLogsInAppServicesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","parameters":{"effect":{"value":"[parameters(''diagnosticLogsInAppServicesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-3"]},{"policyDefinitionReferenceId":"managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","parameters":{"effect":{"value":"[parameters(''managedIdentityShouldBeUsedInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForPostgresqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","parameters":{"effect":{"value":"[parameters(''enforceSSLConnectionShouldBeEnabledForMysqlDatabaseServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","parameters":{"effect":{"value":"[parameters(''latestTLSVersionShouldBeUsedInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-8","Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","parameters":{"effect":{"value":"[parameters(''ensureThatPHPVersionIsTheLatestIfUsedAsAPartOfTheWEBAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","parameters":{"effect":{"value":"[parameters(''ensureThatJavaVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","parameters":{"effect":{"value":"[parameters(''ensureThatPythonVersionIsTheLatestIfUsedAsAPartOfTheApiAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-6"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForPostgresqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMariadbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeEnabledForMysqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","parameters":{"effect":{"value":"[parameters(''sQLServersShouldBeConfiguredWithAuditingRetentionDaysGreaterThan90DaysMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-6"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourFunctionAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSShouldBeRequiredInYourWebAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","parameters":{"effect":{"value":"[parameters(''fTPSShouldBeRequiredInYourWebAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","parameters":{"effect":{"value":"[parameters(''fTPSOnlyShouldBeRequiredInYourAPIAppMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","parameters":{"effect":{"value":"[parameters(''functionAppsShouldHaveClientCertificatesEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldEnableDataEncryptionWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","parameters":{"effect":{"value":"[parameters(''azureCosmosDbAccountsShouldUseCustomerManagedKeysToEncryptDataAtRestMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHavePurgeProtectionEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","parameters":{"effect":{"value":"[parameters(''keyVaultsShouldHaveSoftDeleteEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","parameters":{"effect":{"value":"[parameters(''azureCacheForRedisShouldResideWithinAVirtualNetworkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldUseCustomerManagedKeyForEncryptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","parameters":{"effect":{"value":"[parameters(''storageAccountsShouldRestrictNetworkAccessUsingVirtualNetworkRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldNotAllowUnrestrictedNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"containerRegistriesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","parameters":{"effect":{"value":"[parameters(''containerRegistriesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"appConfigurationShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","parameters":{"effect":{"value":"[parameters(''appConfigurationShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","parameters":{"effect":{"value":"[parameters(''azureEventGridDomainsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","parameters":{"effect":{"value":"[parameters(''azureEventGridTopicsShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureSignalRServiceShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","parameters":{"effect":{"value":"[parameters(''azureSignalRServiceShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldBeEncryptedWithACustomerManagedKeyMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","parameters":{"effect":{"value":"[parameters(''azureMachineLearningWorkspacesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForAzureFrontDoorServiceServiceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","parameters":{"effect":{"value":"[parameters(''webApplicationFirewallShouldBeEnabledForApplicationGatewayMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-6"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMariaDbServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForMySqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","parameters":{"effect":{"value":"[parameters(''bringYourOwnKeyDataProtectionShouldBeEnabledForPostgreSqlServersMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-5"]},{"policyDefinitionReferenceId":"vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","parameters":{"effect":{"value":"[parameters(''vmImageBuilderTemplatesShouldUsePrivateLinkMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"firewallShouldBeEnabledOnKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","parameters":{"effect":{"value":"[parameters(''firewallShouldBeEnabledOnKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","parameters":{"effect":{"value":"[parameters(''privateEndpointShouldBeConfiguredForKeyVaultMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2","Azure_Security_Benchmark_v3.0_DP-8"]},{"policyDefinitionReferenceId":"azureSpringCloudShouldUseNetworkInjectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","parameters":{"effect":{"value":"[parameters(''azureSpringCloudShouldUseNetworkInjectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","parameters":{"effect":{"value":"[parameters(''subscriptionsShouldHaveAContactEmailAddressForSecurityIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","parameters":{"effect":{"value":"[parameters(''autoProvisioningOfTheLogAnalyticsAgentShouldBeEnabledOnYourSubscriptionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-5"]},{"policyDefinitionReferenceId":"emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","parameters":{"effect":{"value":"[parameters(''emailNotificationForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","parameters":{"effect":{"value":"[parameters(''emailNotificationToSubscriptionOwnerForHighSeverityAlertsShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-2"]},{"policyDefinitionReferenceId":"storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","parameters":{"effect":{"value":"[parameters(''storageAccountShouldUseAPrivateLinkConnectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","parameters":{"effect":{"value":"[parameters(''authenticationToLinuxMachinesShouldRequireSSHKeysMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IM-6"]},{"policyDefinitionReferenceId":"privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","parameters":{"effect":{"value":"[parameters(''privateEndpointConnectionsOnAzureSQLDatabaseShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessOnAzureSQLDatabaseShouldBeDisabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","parameters":{"effect":{"value":"[parameters(''ensureAPIAppHasClientCertificatesIncomingClientCertificatesSetToOnMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d","parameters":{"effect":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSExcludedNamespaces'')]"},"namespaces":{"value":"[parameters(''kubernetesClustersShouldBeAccessibleOnlyOverHTTPSNamespaces'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","parameters":{"effect":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMonitoringEffect'')]"},"IncludeArcMachines":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsIncludeArcMachines'')]"},"MinimumTLSVersion":{"value":"[parameters(''windowsWebServersShouldBeConfiguredToUseSecureCommunicationProtocolsMinimumTLSVersion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-3"]},{"policyDefinitionReferenceId":"cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","parameters":{"effect":{"value":"[parameters(''cognitiveServicesAccountsShouldRestrictNetworkAccessMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","parameters":{"effect":{"value":"[parameters(''publicNetworkAccessShouldBeDisabledForCognitiveServicesAccountsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","parameters":{"effect":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkMonitoringEffect'')]"},"evaluatedSkuNames":{"value":"[parameters(''aPIManagementServicesShouldUseAVirtualNetworkEvaluatedSkuNames'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","parameters":{"effect":{"value":"[parameters(''azureCosmosDBAccountsShouldHaveFirewallRulesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-2"]},{"policyDefinitionReferenceId":"networkWatcherShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","parameters":{"effect":{"value":"[parameters(''networkWatcherShouldBeEnabledMonitoringEffect'')]"},"resourceGroupName":{"value":"[parameters(''networkWatcherShouldBeEnabledResourceGroupName'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_IR-4"]},{"policyDefinitionReferenceId":"AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","parameters":{"effect":{"value":"[parameters(''AzureDefenderForResourceManagerShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"AzureDefenderForDNSShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","parameters":{"effect":{"value":"[parameters(''AzureDefenderForDNSShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_NS-10","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotUseTheDefaultNamespaceMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldDisableAutomountingAPICredentialsMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d2e7ea85-6b44-4317-a0be-1b951587f626","parameters":{"effect":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringEffect'')]"},"excludedNamespaces":{"value":"[parameters(''KubernetesClustersShouldNotGrantCAPSYSADMINSecurityCapabilitiesMonitoringNamespaceExclusion'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-2"]},{"policyDefinitionReferenceId":"VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1c30f9cd-b84c-49cc-aa2c-9288447cc3b3","parameters":{"effect":{"value":"[parameters(''VtpmShouldBeEnabledOnSupportedVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"previewSecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121","parameters":{"effect":{"value":"[parameters(''SecureBootShouldBeEnabledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a21f8c92-9e22-4f09-b759-50500d1d2dda","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedLinuxVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1cb4d9c2-f88f-4069-bee0-dba239a57b09","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42","parameters":{"effect":{"value":"[parameters(''GuestAttestationExtensionShouldBeInstalledOnSupportedWindowsVirtualMachinesScaleSetsMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_PV-4"]},{"policyDefinitionReferenceId":"installEndpointProtection","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","parameters":{"effect":{"value":"[parameters(''installEndpointProtectionMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2"]},{"policyDefinitionReferenceId":"endpointProtectionHealthIssuesMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","parameters":{"effect":{"value":"[parameters(''endpointProtectionHealthIssuesMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_ES-2","Azure_Security_Benchmark_v3.0_ES-3"]},{"policyDefinitionReferenceId":"diagnosticsLogsInKubernetesMonitoring","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/245fc9df-fa96-4414-9a0b-3738c2f7341c","parameters":{"effect":{"value":"[parameters(''diagnosticsLogsInKubernetesMonitoringEffect'')]"},"requiredRetentionDays":{"value":"[parameters(''diagnosticsLogsInKubernetesRetentionDays'')]"}},"groupNames":[]},{"policyDefinitionReferenceId":"AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","parameters":{"effect":{"value":"[parameters(''AzureDefenderForOpenSourceRelationalDatabasesShouldBeEnabledMonitoringEffect'')]"}},"groupNames":["Azure_Security_Benchmark_v3.0_DP-2","Azure_Security_Benchmark_v3.0_LT-1","Azure_Security_Benchmark_v3.0_LT-2","Azure_Security_Benchmark_v3.0_IR-3","Azure_Security_Benchmark_v3.0_IR-5"]}],"policyDefinitionGroups":[{"name":"Azure_Security_Benchmark_v3.0_NS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-1"},{"name":"Azure_Security_Benchmark_v3.0_NS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-2"},{"name":"Azure_Security_Benchmark_v3.0_NS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-3"},{"name":"Azure_Security_Benchmark_v3.0_NS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-4"},{"name":"Azure_Security_Benchmark_v3.0_NS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-5"},{"name":"Azure_Security_Benchmark_v3.0_NS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-6"},{"name":"Azure_Security_Benchmark_v3.0_NS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-7"},{"name":"Azure_Security_Benchmark_v3.0_NS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-8"},{"name":"Azure_Security_Benchmark_v3.0_NS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-9"},{"name":"Azure_Security_Benchmark_v3.0_NS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_NS-10"},{"name":"Azure_Security_Benchmark_v3.0_DP-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-1"},{"name":"Azure_Security_Benchmark_v3.0_DP-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-2"},{"name":"Azure_Security_Benchmark_v3.0_DP-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-3"},{"name":"Azure_Security_Benchmark_v3.0_DP-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-4"},{"name":"Azure_Security_Benchmark_v3.0_DP-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-5"},{"name":"Azure_Security_Benchmark_v3.0_DP-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-6"},{"name":"Azure_Security_Benchmark_v3.0_DP-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-7"},{"name":"Azure_Security_Benchmark_v3.0_DP-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DP-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-1"},{"name":"Azure_Security_Benchmark_v3.0_IM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-2"},{"name":"Azure_Security_Benchmark_v3.0_IM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-3"},{"name":"Azure_Security_Benchmark_v3.0_IM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-4"},{"name":"Azure_Security_Benchmark_v3.0_IM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-5"},{"name":"Azure_Security_Benchmark_v3.0_IM-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-6"},{"name":"Azure_Security_Benchmark_v3.0_IM-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-7"},{"name":"Azure_Security_Benchmark_v3.0_IM-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-8"},{"name":"Azure_Security_Benchmark_v3.0_IM-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IM-9"},{"name":"Azure_Security_Benchmark_v3.0_PA-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-1"},{"name":"Azure_Security_Benchmark_v3.0_PA-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-2"},{"name":"Azure_Security_Benchmark_v3.0_PA-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-3"},{"name":"Azure_Security_Benchmark_v3.0_PA-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-4"},{"name":"Azure_Security_Benchmark_v3.0_PA-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-5"},{"name":"Azure_Security_Benchmark_v3.0_PA-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-6"},{"name":"Azure_Security_Benchmark_v3.0_PA-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-7"},{"name":"Azure_Security_Benchmark_v3.0_PA-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PA-8"},{"name":"Azure_Security_Benchmark_v3.0_PV-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-1"},{"name":"Azure_Security_Benchmark_v3.0_PV-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-2"},{"name":"Azure_Security_Benchmark_v3.0_PV-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-3"},{"name":"Azure_Security_Benchmark_v3.0_PV-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-4"},{"name":"Azure_Security_Benchmark_v3.0_PV-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-5"},{"name":"Azure_Security_Benchmark_v3.0_PV-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-6"},{"name":"Azure_Security_Benchmark_v3.0_PV-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_PV-7"},{"name":"Azure_Security_Benchmark_v3.0_LT-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-1"},{"name":"Azure_Security_Benchmark_v3.0_LT-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-2"},{"name":"Azure_Security_Benchmark_v3.0_LT-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-3"},{"name":"Azure_Security_Benchmark_v3.0_LT-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-4"},{"name":"Azure_Security_Benchmark_v3.0_LT-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-5"},{"name":"Azure_Security_Benchmark_v3.0_LT-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-6"},{"name":"Azure_Security_Benchmark_v3.0_LT-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_LT-7"},{"name":"Azure_Security_Benchmark_v3.0_AM-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-1"},{"name":"Azure_Security_Benchmark_v3.0_AM-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-2"},{"name":"Azure_Security_Benchmark_v3.0_AM-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-3"},{"name":"Azure_Security_Benchmark_v3.0_AM-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-4"},{"name":"Azure_Security_Benchmark_v3.0_AM-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_AM-5"},{"name":"Azure_Security_Benchmark_v3.0_ES-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-1"},{"name":"Azure_Security_Benchmark_v3.0_ES-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-2"},{"name":"Azure_Security_Benchmark_v3.0_ES-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_ES-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-1"},{"name":"Azure_Security_Benchmark_v3.0_BR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-2"},{"name":"Azure_Security_Benchmark_v3.0_BR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-3"},{"name":"Azure_Security_Benchmark_v3.0_BR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_BR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-1"},{"name":"Azure_Security_Benchmark_v3.0_IR-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-2"},{"name":"Azure_Security_Benchmark_v3.0_IR-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-3"},{"name":"Azure_Security_Benchmark_v3.0_IR-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-4"},{"name":"Azure_Security_Benchmark_v3.0_IR-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-5"},{"name":"Azure_Security_Benchmark_v3.0_IR-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-6"},{"name":"Azure_Security_Benchmark_v3.0_IR-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_IR-7"},{"name":"Azure_Security_Benchmark_v3.0_DS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-1"},{"name":"Azure_Security_Benchmark_v3.0_DS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-2"},{"name":"Azure_Security_Benchmark_v3.0_DS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-3"},{"name":"Azure_Security_Benchmark_v3.0_DS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-4"},{"name":"Azure_Security_Benchmark_v3.0_DS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-5"},{"name":"Azure_Security_Benchmark_v3.0_DS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-6"},{"name":"Azure_Security_Benchmark_v3.0_DS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_DS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-1","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-1"},{"name":"Azure_Security_Benchmark_v3.0_GS-2","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-2"},{"name":"Azure_Security_Benchmark_v3.0_GS-3","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-3"},{"name":"Azure_Security_Benchmark_v3.0_GS-4","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-4"},{"name":"Azure_Security_Benchmark_v3.0_GS-5","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-5"},{"name":"Azure_Security_Benchmark_v3.0_GS-6","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-6"},{"name":"Azure_Security_Benchmark_v3.0_GS-7","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-7"},{"name":"Azure_Security_Benchmark_v3.0_GS-8","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-8"},{"name":"Azure_Security_Benchmark_v3.0_GS-9","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-9"},{"name":"Azure_Security_Benchmark_v3.0_GS-10","additionalMetadataId":"/providers/Microsoft.PolicyInsights/policyMetadata/Azure_Security_Benchmark_v3.0_GS-10"}]},"id":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","type":"Microsoft.Authorization/policySetDefinitions","name":"1f3afdf9-d0c9-4c3d-847f-89da613e70a8"},{"properties":{"displayName":"[Deprecated]:
         Audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","description":"This
         initiative deploys the policy requirements and audits Windows virtual machines
         that do not have the specified applications installed. For more information
@@ -16647,7 +16647,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -17773,7 +17773,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -19429,7 +19429,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -20326,7 +20326,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -20624,7 +20624,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -20839,12 +20839,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -20966,7 +20966,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -21000,7 +21000,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -21157,7 +21157,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -21414,7 +21414,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -21490,7 +21490,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -21560,7 +21560,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -21688,7 +21688,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -21730,7 +21730,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -21835,7 +21835,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -21845,7 +21845,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -22956,7 +22956,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -23067,7 +23067,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -23140,7 +23140,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -23157,7 +23157,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -23421,7 +23421,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -23534,7 +23534,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -23714,7 +23714,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -23896,7 +23896,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -24181,7 +24181,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -24276,7 +24276,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -24329,7 +24329,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -24406,7 +24406,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -24566,7 +24566,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -24633,7 +24633,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -24775,7 +24775,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -24915,7 +24915,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -25084,7 +25084,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -25179,7 +25179,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -25238,7 +25238,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -25887,7 +25887,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -26003,7 +26003,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -26011,7 +26011,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -26052,7 +26052,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -26141,7 +26141,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -26256,7 +26256,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -26290,7 +26290,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26311,7 +26311,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -26453,7 +26453,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -26983,7 +26983,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -27176,7 +27176,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -27397,7 +27397,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -27509,7 +27509,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -27571,8 +27571,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -27879,7 +27879,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -28018,7 +28018,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -28069,7 +28069,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -28600,7 +28600,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -28677,7 +28677,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -29428,7 +29428,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29584,7 +29584,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -29698,7 +29698,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -30135,7 +30135,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -30864,7 +30864,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -30875,7 +30875,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -30883,7 +30883,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -31032,7 +31032,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -31157,7 +31157,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -31337,7 +31337,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -31392,7 +31392,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -32081,7 +32081,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"[Preview]:
@@ -32188,7 +32188,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32228,7 +32228,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -32401,7 +32401,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32449,7 +32449,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32596,7 +32596,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -32619,7 +32619,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -33099,7 +33099,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -33135,7 +33135,7 @@ interactions:
         Service Environment should enable internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade
@@ -33322,7 +33322,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -33333,7 +33333,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -33341,7 +33341,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
@@ -34628,7 +34628,7 @@ interactions:
         def","policyType":"Custom","mode":"All","metadata":{"category":"Test","createdBy":"22ac4b8c-9194-4feb-b6c6-0e7a995fca2e","createdOn":"2019-03-28T00:13:27.0393653Z","updatedBy":"0dc80135-ae53-4da3-8695-220a2d93aad8","updatedOn":"2021-11-15T17:50:37.6772986Z"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed
         locations","description":"The list of allowed locations for resources.","strongType":"location"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementGroups/AzGovPerfTest/providers/Microsoft.Authorization/policyDefinitions/5b51a7de-acd9-42cd-81bd-32d9c01968e9","type":"Microsoft.Authorization/policyDefinitions","name":"5b51a7de-acd9-42cd-81bd-32d9c01968e9","systemData":{"lastModifiedBy":"robga@microsoft.com","lastModifiedByType":"User","lastModifiedAt":"2021-11-15T17:50:37.6597366Z"}},{"properties":{"displayName":"Create
         resource group if it does not exist","policyType":"Custom","mode":"All","description":"Test
-        link: <a href=\\\"https://docs.microsoft.com/en-us/azure/security-center/defender-for-dns-introduction\\\">Learn
+        link: <a href=\\\"https://learn.microsoft.com/en-us/azure/security-center/defender-for-dns-introduction\\\">Learn
         more about Azure Defender for DNS</a>","metadata":{"createdBy":"36e2f355-d2e2-4fbc-88ab-4281639dff94","createdOn":"2021-02-08T19:47:07.1779622Z","updatedBy":"36e2f355-d2e2-4fbc-88ab-4281639dff94","updatedOn":"2021-02-16T03:55:44.0055805Z"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Resources/subscriptions/resourceGroups","name":"subGreenfieldRg","existenceScope":"subscription","deploymentScope":"subscription","deployment":{"location":"eastus","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"name":"subGreenfieldRg","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"eastus","properties":{}}]}}},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"]}}}},"id":"/providers/Microsoft.Management/managementGroups/AzGovPerfTest/providers/Microsoft.Authorization/policyDefinitions/64f8fdd9-7ea8-48ba-938d-fec37063b311","type":"Microsoft.Authorization/policyDefinitions","name":"64f8fdd9-7ea8-48ba-938d-fec37063b311"},{"properties":{"displayName":"Add
         time tag to subscriptions","policyType":"Custom","mode":"All","metadata":{"createdBy":"36e2f355-d2e2-4fbc-88ab-4281639dff94","createdOn":"2021-02-08T19:34:49.9167661Z","updatedBy":null,"updatedOn":null},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"modify","details":{"operations":[{"field":"tags.lastModify","operation":"addOrReplace","value":"[utcNow()]"}],"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f"]}}}},"id":"/providers/Microsoft.Management/managementGroups/AzGovPerfTest/providers/Microsoft.Authorization/policyDefinitions/7637bcff-f8f5-4077-924a-287ae88f7299","type":"Microsoft.Authorization/policyDefinitions","name":"7637bcff-f8f5-4077-924a-287ae88f7299"},{"properties":{"displayName":"Empty
         deployment on each KeyVault resource","policyType":"Custom","mode":"Indexed","description":"Deploys
@@ -34763,7 +34763,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -35061,7 +35061,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -35276,12 +35276,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -35403,7 +35403,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -35437,7 +35437,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -35594,7 +35594,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -35851,7 +35851,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -35927,7 +35927,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -35997,7 +35997,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -36125,7 +36125,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -36167,7 +36167,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -36272,7 +36272,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -36282,7 +36282,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -37393,7 +37393,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -37504,7 +37504,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -37577,7 +37577,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -37594,7 +37594,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -37858,7 +37858,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -37971,7 +37971,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -38151,7 +38151,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -38333,7 +38333,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38618,7 +38618,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -38713,7 +38713,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -38766,7 +38766,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -38843,7 +38843,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -39003,7 +39003,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -39070,7 +39070,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -39212,7 +39212,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -39352,7 +39352,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -39521,7 +39521,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -39616,7 +39616,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -39675,7 +39675,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -40324,7 +40324,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -40440,7 +40440,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -40448,7 +40448,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -40489,7 +40489,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -40578,7 +40578,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -40693,7 +40693,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -40727,7 +40727,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -40748,7 +40748,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -40890,7 +40890,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -41420,7 +41420,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -41613,7 +41613,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -41834,7 +41834,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -41946,7 +41946,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -42008,8 +42008,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -42316,7 +42316,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -42455,7 +42455,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -42506,7 +42506,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -43037,7 +43037,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -43114,7 +43114,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -43865,7 +43865,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -44021,7 +44021,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -44135,7 +44135,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -44572,7 +44572,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -45301,7 +45301,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -45312,7 +45312,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -45320,7 +45320,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -45469,7 +45469,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -45594,7 +45594,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -45774,7 +45774,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -45829,7 +45829,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -46518,7 +46518,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"},{"properties":{"displayName":"[Preview]:
@@ -46625,7 +46625,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -46665,7 +46665,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"},{"properties":{"displayName":"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Incident Response control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -46838,7 +46838,7 @@ interactions:
         Event Hub namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -46886,7 +46886,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -47033,7 +47033,7 @@ interactions:
         Service Bus namespaces to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -47056,7 +47056,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -47536,7 +47536,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"},{"properties":{"displayName":"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Access Control control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -47572,7 +47572,7 @@ interactions:
         Service Environment should enable internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"},{"properties":{"displayName":"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade
@@ -47759,7 +47759,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -47770,7 +47770,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -47778,7 +47778,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
@@ -49065,7 +49065,7 @@ interactions:
         def","policyType":"Custom","mode":"All","metadata":{"category":"Test","createdBy":"22ac4b8c-9194-4feb-b6c6-0e7a995fca2e","createdOn":"2019-03-28T00:13:27.0393653Z","updatedBy":"0dc80135-ae53-4da3-8695-220a2d93aad8","updatedOn":"2021-11-15T17:50:37.6772986Z"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed
         locations","description":"The list of allowed locations for resources.","strongType":"location"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Management/managementGroups/AzGovPerfTest/providers/Microsoft.Authorization/policyDefinitions/5b51a7de-acd9-42cd-81bd-32d9c01968e9","type":"Microsoft.Authorization/policyDefinitions","name":"5b51a7de-acd9-42cd-81bd-32d9c01968e9","systemData":{"lastModifiedBy":"robga@microsoft.com","lastModifiedByType":"User","lastModifiedAt":"2021-11-15T17:50:37.6597366Z"}},{"properties":{"displayName":"Create
         resource group if it does not exist","policyType":"Custom","mode":"All","description":"Test
-        link: <a href=\\\"https://docs.microsoft.com/en-us/azure/security-center/defender-for-dns-introduction\\\">Learn
+        link: <a href=\\\"https://learn.microsoft.com/en-us/azure/security-center/defender-for-dns-introduction\\\">Learn
         more about Azure Defender for DNS</a>","metadata":{"createdBy":"36e2f355-d2e2-4fbc-88ab-4281639dff94","createdOn":"2021-02-08T19:47:07.1779622Z","updatedBy":"36e2f355-d2e2-4fbc-88ab-4281639dff94","updatedOn":"2021-02-16T03:55:44.0055805Z"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Resources/subscriptions/resourceGroups","name":"subGreenfieldRg","existenceScope":"subscription","deploymentScope":"subscription","deployment":{"location":"eastus","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"name":"subGreenfieldRg","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"eastus","properties":{}}]}}},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"]}}}},"id":"/providers/Microsoft.Management/managementGroups/AzGovPerfTest/providers/Microsoft.Authorization/policyDefinitions/64f8fdd9-7ea8-48ba-938d-fec37063b311","type":"Microsoft.Authorization/policyDefinitions","name":"64f8fdd9-7ea8-48ba-938d-fec37063b311"},{"properties":{"displayName":"Add
         time tag to subscriptions","policyType":"Custom","mode":"All","metadata":{"createdBy":"36e2f355-d2e2-4fbc-88ab-4281639dff94","createdOn":"2021-02-08T19:34:49.9167661Z","updatedBy":null,"updatedOn":null},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"modify","details":{"operations":[{"field":"tags.lastModify","operation":"addOrReplace","value":"[utcNow()]"}],"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f"]}}}},"id":"/providers/Microsoft.Management/managementGroups/AzGovPerfTest/providers/Microsoft.Authorization/policyDefinitions/7637bcff-f8f5-4077-924a-287ae88f7299","type":"Microsoft.Authorization/policyDefinitions","name":"7637bcff-f8f5-4077-924a-287ae88f7299"},{"properties":{"displayName":"Empty
         deployment on each KeyVault resource","policyType":"Custom","mode":"Indexed","description":"Deploys
diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_show_built_in_policy.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_show_built_in_policy.yaml
index 302b7fd52d7..7a34e995483 100644
--- a/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_show_built_in_policy.yaml
+++ b/src/azure-cli/azure/cli/command_modules/resource/tests/latest/recordings/test_show_built_in_policy.yaml
@@ -67,7 +67,7 @@ interactions:
         endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure
         Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure
         protection of your Azure Virtual Machines by enabling Azure Backup. Azure
@@ -365,7 +365,7 @@ interactions:
         desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EdgeOrder/orderItems\"},{\"field\":\"Microsoft.EdgeOrder/orderItems/orderItemDetails.preferences.encryptionPreferences.doubleEncryptionStatus\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a6b96f-576e-47a2-8511-119a212d344d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a6b96f-576e-47a2-8511-119a212d344d\"},{\"properties\":{\"displayName\":\"Configure
         Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data
         Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"],\"defaultValue\":\"Modify\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion,
         '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
@@ -580,12 +580,12 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Application
         Insights components with Private Link enabled should use Bring Your Own Storage
         accounts for profiler and debugger.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To
         support private link and customer-managed key policies, create your own storage
-        account for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        account for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"field\":\"Microsoft.Insights/components/ForceCustomerStorageForProfiler\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c4bd2e8-8872-4f37-a654-03f6f38ddc76\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -707,7 +707,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -741,7 +741,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6\"},{\"properties\":{\"displayName\":\"Azure
         Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure
         Private Link lets you connect your virtual network to Azure services without
@@ -898,7 +898,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -1155,7 +1155,7 @@ interactions:
         Batch pools should have disk encryption enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling
         Azure Batch disk encryption ensures that data is always encrypted at rest
         on your Azure Batch compute node. Learn more about disk encryption in Batch
-        at https://docs.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        at https://learn.microsoft.com/azure/batch/disk-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts/pools\"},{\"count\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"where\":{\"field\":\"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]\",\"contains\":\"TemporaryDisk\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1760f9d4-7206-436e-a28f-d9f3a5c8a227\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1349 - Identification And Authentication (Non-Org. Users)
         | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -1231,7 +1231,7 @@ interactions:
         Azure Key Vault Managed HSM should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable
         public network access for your Azure Key Vault Managed HSM so that it's not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Key
         Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHSMs\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/createMode\",\"notEquals\":\"recover\"},{\"field\":\"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19ea9d63-adee-4431-a95e-1913c6c1c75f\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -1301,7 +1301,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"],\"defaultValue\":\"AuditIfNotExists\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy
         - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy
@@ -1429,7 +1429,7 @@ interactions:
         Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target
         sub-resource\",\"description\":\"Target sub resource the private endpoint
         connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"],\"defaultValue\":\"Dev\"},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -1471,7 +1471,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy
         Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys
         the diagnostic settings for Event Hub to stream to a regional Log Analytics
@@ -1576,7 +1576,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM
         Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
@@ -1586,7 +1586,7 @@ interactions:
         for point-to-site users\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes\",\"exists\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"where\":{\"field\":\"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]\",\"notcontains\":\"AAD\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a6bc25-125e-4d13-b82d-2e19b7208ab7\"},{\"properties\":{\"displayName\":\"Public
         network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         the public endpoint allows you to restrict access to your Storage Sync Service
@@ -2697,7 +2697,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients\",\"description\":\"Specifies which behaviors are allowed by clients
         for applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information.\"},\"defaultValue\":\"537395200\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers\",\"description\":\"Specifies which behaviors are allowed by servers
@@ -2808,7 +2808,7 @@ interactions:
         Synapse workspaces should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn't exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38d8df46-cf4e-4073-8e03-48c24b29de0d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -2881,7 +2881,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don't need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Azure
         Active Directory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AAD/domainServices\"},{\"field\":\"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7\"},{\"properties\":{\"displayName\":\"[Deprecated]:
         Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define
@@ -2898,7 +2898,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto
@@ -3162,7 +3162,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit
         a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds
@@ -3275,7 +3275,7 @@ interactions:
         Azure Monitor Private Link Scope to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateDnsZoneId1\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone for global endpoints used by Azure Monitor\",\"description\":\"One
         of the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"assignPermissions\":true}},\"privateDnsZoneId2\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
@@ -3455,7 +3455,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn't exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage
         accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable
         infrastructure encryption for higher level of assurance that the data is secure.
@@ -3637,7 +3637,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -3922,7 +3922,7 @@ interactions:
         records allow private connections to private endpoints. Private endpoint connections
         allow secure communication by enabling private connectivity to Batch accounts
         without a need for public IP addresses at the source or destination. For more
-        information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -4017,7 +4017,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -4070,7 +4070,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"},{"properties":{"displayName":"Microsoft
         Managed Control 1352 - Incident Response Policy And Procedures","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4147,7 +4147,7 @@ interactions:
         DB database accounts should have local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"},{"properties":{"displayName":"App
         Service apps should use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With
@@ -4307,7 +4307,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your CosmosDB account, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"},{"properties":{"displayName":"Microsoft
         Managed Control 1584 - Information System Documentation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4374,7 +4374,7 @@ interactions:
         Azure Key Vault Managed HSM should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"},{"properties":{"displayName":"Microsoft
         Managed Control 1512 - Personnel Screening","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -4516,7 +4516,7 @@ interactions:
         Azure Synapse workspaces to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"},{"properties":{"displayName":"Microsoft
         Managed Control 1483 - Water Damage Protection","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Physical and Environmental Protection control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -4656,7 +4656,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"},{"properties":{"displayName":"Vulnerabilities
         in Azure Container Registry images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container
@@ -4825,7 +4825,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"},{"properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service
@@ -4920,7 +4920,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -4979,7 +4979,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -5628,7 +5628,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from all nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -5744,7 +5744,7 @@ interactions:
         Service Apps should be injected into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"},{"properties":{"displayName":"Azure
         Synapse workspaces should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure
@@ -5752,7 +5752,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Synapse workspace,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"},{"properties":{"displayName":"Microsoft
         Managed Control 1524 - Personnel Transfer","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Personnel Security control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -5793,7 +5793,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -5882,7 +5882,7 @@ interactions:
         network access should be disabled for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"},{"properties":{"displayName":"Public
         IP addresses should have resource logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable
         resource logs for public IP addressess in diagnostic settings to stream to
@@ -5997,7 +5997,7 @@ interactions:
         endpoints lets you connect your virtual network to Azure services without
         a public IP address at the source or destination. By mapping private endpoints
         to your Azure Cache for Redis instances, data leakage risks are reduced. Learn
-        more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        more at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"},{"properties":{"displayName":"Audit
         Azure Machine Learning Compute Cluster and Instance is behind virtual network","policyType":"BuiltIn","mode":"All","description":"Azure
         Virtual Network deployment provides enhanced security and isolation for your
@@ -6031,7 +6031,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -6052,7 +6052,7 @@ interactions:
         Cosmos DB should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"},{"properties":{"displayName":"Microsoft
         Managed Control 1510 - Position Risk Designation","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -6194,7 +6194,7 @@ interactions:
         Service Bus namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -6724,7 +6724,7 @@ interactions:
         Configure Azure Key Vault Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"},{"properties":{"displayName":"Microsoft
         Managed Control 1307 - Identification And Authentication (Org. Users) | Net.
@@ -6917,7 +6917,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -7138,7 +7138,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Data Factory, data
-        leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This
@@ -7250,7 +7250,7 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc enabled Kubernetes
         clusters. The extension collects data from nodes in the cluster and sends
         it to the Azure Defender for Kubernetes backend in the cloud for further analysis.
-        Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"},{"properties":{"displayName":"[Deprecated]:
         Deploy prerequisites to audit Windows VMs configurations in ''System Audit
         Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This
@@ -7312,8 +7312,8 @@ interactions:
         protection health issues should be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"},{"properties":{"displayName":"Microsoft
         Managed Control 1278 - Alternate Processing Site | Preparation For Use","policyType":"Static","mode":"Indexed","description":"Microsoft
@@ -7620,7 +7620,7 @@ interactions:
         Event Hub namespaces with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -7759,7 +7759,7 @@ interactions:
         keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that Azure
         Log Search Alerts are implementing customer-managed keys, by storing the query
         text using the storage account that the customer had provided for the queried
-        Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"},{"properties":{"displayName":"Windows
         machines should meet requirements for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows
         machines should have the specified Group Policy settings in the category ''System
@@ -7810,7 +7810,7 @@ interactions:
         accounts should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"},{"properties":{"displayName":"Authentication
         should be enabled on your web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure
         App Service Authentication is a feature that can prevent anonymous HTTP requests
@@ -8341,7 +8341,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"},{"properties":{"displayName":"Microsoft
         Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site","policyType":"Static","mode":"Indexed","description":"Microsoft
         implements this Contingency Planning control","metadata":{"version":"1.0.0","category":"Regulatory
@@ -8418,7 +8418,7 @@ interactions:
         logs in Azure Key Vault Managed HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"},{"properties":{"displayName":"Microsoft
@@ -9169,7 +9169,7 @@ interactions:
         App Services to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links a virtual network to an App Service. Learn more at:
-        https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -9325,7 +9325,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -9439,7 +9439,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Event Hub namespaces, data
-        leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"},{"properties":{"displayName":"[Deprecated]:
         Show audit results from Windows VMs configurations in ''Security Options -
@@ -9876,7 +9876,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"},{"properties":{"displayName":"Only
@@ -10605,7 +10605,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -10616,7 +10616,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -10624,7 +10624,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -10773,7 +10773,7 @@ interactions:
         Configure Azure Key Vault Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -10898,7 +10898,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"},{"properties":{"displayName":"Deploy
         Diagnostic Settings for Data Lake Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys
         the diagnostic settings for Data Lake Analytics to stream to a regional Log
@@ -11078,7 +11078,7 @@ interactions:
         CosmosDB accounts to disable public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"},{"properties":{"displayName":"Azure
@@ -11133,7 +11133,7 @@ interactions:
         Cosmos DB database accounts to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"},{"properties":{"displayName":"Microsoft
@@ -11821,7 +11821,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet ID\",\"description\":\"A subnet with private endpoint network
         policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"],\"defaultValue\":\"DeployIfNotExists\"}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Insights/privateLinkScopes\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"azuremonitor\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8185402-357b-4768-8058-f620bc0ae6b5\"},{\"properties\":{\"displayName\":\"[Preview]:
@@ -11927,7 +11927,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Site
         Recovery\",\"preview\":true},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         endpoint subnet id\",\"description\":\"A subnet with private endpoint network
         policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -11968,7 +11968,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12143,7 +12143,7 @@ interactions:
         Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event
         Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12191,7 +12191,7 @@ interactions:
         Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine
         Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private
         endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12342,7 +12342,7 @@ interactions:
         Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service
         Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private
         DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure
         private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
@@ -12365,7 +12365,7 @@ interactions:
         and this flag is set to 'true' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group.\"},\"allowedValues\":[true,false],\"defaultValue\":true},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert
         name contains\",\"description\":\"String included in the required alert name.
-        For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
+        For a full reference list of Security Center's alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference.\"},\"defaultValue\":\"\"},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic
         app trigger\",\"description\":\"The trigger connector of the logic app that
@@ -12850,7 +12850,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The
         effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"],\"defaultValue\":\"audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft
         Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft
         implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory
@@ -12886,7 +12886,7 @@ interactions:
         Service Environment should enable internal encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App
         Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable
         or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"],\"defaultValue\":\"Audit\"}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/hostingEnvironments\"},{\"field\":\"kind\",\"like\":\"ASE*\"},{\"count\":{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].name\",\"equals\":\"InternalEncryption\"},{\"field\":\"Microsoft.Web/HostingEnvironments/clusterSettings[*].value\",\"equals\":\"true\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb74e86f-d351-4b8d-b034-93da7391c01f\"},{\"properties\":{\"displayName\":\"Kubernetes
         Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade
@@ -13077,7 +13077,7 @@ interactions:
         IDs\",\"description\":\"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons (';'). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"},\"defaultValue\":[]},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation
         severities\",\"description\":\"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include
@@ -13088,7 +13088,7 @@ interactions:
         score controls. To export all secure score controls, leave this empty. To
         export specific secure score controls, enter a list of secure score controls
         IDs separated by semicolons (';'). Secure score controls IDs are available
-        through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        through the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"},\"defaultValue\":[]},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert
         severities\",\"description\":\"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"],\"defaultValue\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory
@@ -13097,7 +13097,7 @@ interactions:
         empty. To export specific regulatory compliance standards, enter a list of
         these standards names separated by semicolons (';'). Regulatory compliance
         standards names are available through the regulatory compliance standards
-        API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"},\"defaultValue\":[]},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log
         Analytics workspace\",\"description\":\"The Log Analytics workspace of where
         the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security
@@ -18248,7 +18248,7 @@ interactions:
         accounts should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoint connections allow secure communication by enabling private connectivity
         to Batch accounts without a need for public IP addresses at the source or
-        destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        destination. Learn more about private endpoints in Batch at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Batch/batchAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563","type":"Microsoft.Authorization/policyDefinitions","name":"009a0c92-f5b4-4776-9b66-4ed2b4775563"}'
     headers:
       cache-control:
@@ -20849,7 +20849,7 @@ interactions:
       string: '{"properties":{"displayName":"Configure Data Factories to disable public
         network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Data Factory so that it is not accessible over
-        the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        the public internet. This can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories"},{"field":"Microsoft.DataFactory/factories/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5"],"operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2018-06-01'')]","operation":"addOrReplace","field":"Microsoft.DataFactory/factories/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7","type":"Microsoft.Authorization/policyDefinitions","name":"08b1442b-7789-4130-8506-4f99a97226a7"}'
@@ -22713,7 +22713,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Automation accounts without a need for public IP addresses at the source
         or destination. Learn more about private endpoints in Azure Automation at
-        https://docs.microsoft.com/azure/automation/how-to/private-link-security","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/automation/how-to/private-link-security","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462","type":"Microsoft.Authorization/policyDefinitions","name":"0c2b3618-68a8-4034-a150-ff4abc873462"}'
     headers:
       cache-control:
@@ -22807,7 +22807,7 @@ interactions:
         Private Link enabled should use Bring Your Own Storage accounts for profiler
         and debugger.","policyType":"BuiltIn","mode":"Indexed","description":"To support
         private link and customer-managed key policies, create your own storage account
-        for profiler and debugger. Learn more in https://docs.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        for profiler and debugger. Learn more in https://learn.microsoft.com/azure/azure-monitor/app/profiler-bring-your-own-storage","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Deny","Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"field":"Microsoft.Insights/components/ForceCustomerStorageForProfiler","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0c4bd2e8-8872-4f37-a654-03f6f38ddc76","type":"Microsoft.Authorization/policyDefinitions","name":"0c4bd2e8-8872-4f37-a654-03f6f38ddc76"}'
     headers:
       cache-control:
@@ -23974,7 +23974,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Batch
         accounts, you can reduce data leakage risks. Learn more about private links
-        at: https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at: https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","equals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Batch/batchAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["batchAccount"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73","type":"Microsoft.Authorization/policyDefinitions","name":"0ef5aac7-c064-427a-b87b-d47b3ddcaf73"}'
@@ -24168,7 +24168,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Monitor Private Links
         Scope, you can reduce data leakage risks. Learn more about private links at:
-        https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6","type":"Microsoft.Authorization/policyDefinitions","name":"0fc55270-f8bf-4feb-b7b8-5e7e7eacc6a6"}'
     headers:
       cache-control:
@@ -25462,7 +25462,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -27085,7 +27085,7 @@ interactions:
       string: '{"properties":{"displayName":"Azure Batch pools should have disk encryption
         enabled","policyType":"BuiltIn","mode":"All","description":"Enabling Azure
         Batch disk encryption ensures that data is always encrypted at rest on your
-        Azure Batch compute node. Learn more about disk encryption in Batch at https://docs.microsoft.com/azure/batch/disk-encryption.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        Azure Batch compute node. Learn more about disk encryption in Batch at https://learn.microsoft.com/azure/batch/disk-encryption.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts/pools"},{"count":{"field":"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]","where":{"field":"Microsoft.Batch/batchAccounts/pools/deploymentConfiguration.virtualMachineConfiguration.diskEncryptionConfiguration.targets[*]","contains":"TemporaryDisk"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1760f9d4-7206-436e-a28f-d9f3a5c8a227","type":"Microsoft.Authorization/policyDefinitions","name":"1760f9d4-7206-436e-a28f-d9f3a5c8a227"}'
     headers:
       cache-control:
@@ -27768,7 +27768,7 @@ interactions:
         should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"1.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/createMode","notEquals":"recover"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/19ea9d63-adee-4431-a95e-1913c6c1c75f","type":"Microsoft.Authorization/policyDefinitions","name":"19ea9d63-adee-4431-a95e-1913c6c1c75f"}'
     headers:
@@ -28724,7 +28724,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Service Bus namespaces,
-        data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        data leakage risks are reduced. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"field":"Microsoft.ServiceBus/namespaces/sku.tier","equals":"Premium"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ServiceBus/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d","type":"Microsoft.Authorization/policyDefinitions","name":"1c06e275-d63d-4540-b761-71f364c2111d"}'
     headers:
@@ -29894,7 +29894,7 @@ interactions:
         use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Synapse
-        workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        workspace. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone Id","strongType":"Microsoft.Network/privateDnsZones"}},"targetSubResource":{"type":"String","metadata":{"displayName":"Target
         sub-resource","description":"Target sub resource the private endpoint connects
         to"},"allowedValues":["Dev","Sql","SqlOnDemand"],"defaultValue":"Dev"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -30469,7 +30469,7 @@ interactions:
         the log data is encrypted with service-managed keys, but customer-managed
         keys are commonly required to meet regulatory compliance. Customer-managed
         key in Azure Monitor gives you more control over the access to you data, see
-        https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"anyOf":[{"anyOf":[{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri","equals":""},{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri","exists":"false"}]},{"anyOf":[{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName","equals":""},{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName","exists":"false"}]},{"not":{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion","exists":"true"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2","type":"Microsoft.Authorization/policyDefinitions","name":"1f68a601-6e6d-4e42-babf-3f643a047ea2"}'
     headers:
       cache-control:
@@ -31364,7 +31364,7 @@ interactions:
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to your VM Image Builder building
         resources, data leakage risks are reduced. Learn more about private links
-        at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.","metadata":{"version":"1.1.0","category":"VM
+        at: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.","metadata":{"version":"1.1.0","category":"VM
         Image Builder"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.VirtualMachineImages/imageTemplates"},{"field":"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","type":"Microsoft.Authorization/policyDefinitions","name":"2154edb9-244f-4741-9970-660785bccdaa"}'
     headers:
@@ -31459,7 +31459,7 @@ interactions:
         Directory (Azure AD) authentication for point-to-site users","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that VPN Gateways
         use only Azure Active Directory identities for authentication. Learn more
-        about Azure AD authentication at https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        about Azure AD authentication at https://learn.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworkGateways"},{"field":"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnClientAddressPool.addressPrefixes","exists":"true"},{"count":{"field":"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]","where":{"field":"Microsoft.Network/virtualNetworkGateways/vpnClientConfiguration.vpnAuthenticationTypes[*]","notcontains":"AAD"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7","type":"Microsoft.Authorization/policyDefinitions","name":"21a6bc25-125e-4d13-b82d-2e19b7208ab7"}'
     headers:
       cache-control:
@@ -39914,7 +39914,7 @@ interactions:
         security: Minimum session security for NTLM SSP based (including secure RPC)
         clients","description":"Specifies which behaviors are allowed by clients for
         applications using the NTLM Security Support Provider (SSP). The SSP Interface
-        (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
+        (SSPI) is used by applications that need authentication services. See https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers
         for more information."},"defaultValue":"537395200"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network
         security: Minimum session security for NTLM SSP based (including secure RPC)
         servers","description":"Specifies which behaviors are allowed by servers for
@@ -40630,7 +40630,7 @@ interactions:
         public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the Synapse workspace
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your Synapse workspaces. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        exposure of your Synapse workspaces. Learn more at: https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/38d8df46-cf4e-4073-8e03-48c24b29de0d","type":"Microsoft.Authorization/policyDefinitions","name":"38d8df46-cf4e-4073-8e03-48c24b29de0d"}'
     headers:
       cache-control:
@@ -41204,7 +41204,7 @@ interactions:
         enables the use of ciphers such as NTLM v1 and TLS v1. These ciphers may be
         required for some legacy applications, but are considered weak and can be
         disabled if you don''t need them. When TLS 1.2 only mode is enabled, any client
-        making a request that is not using TLS 1.2 will fail. Learn more at https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain.","metadata":{"version":"1.1.0","category":"Azure
+        making a request that is not using TLS 1.2 will fail. Learn more at https://learn.microsoft.com/azure/active-directory-domain-services/secure-your-domain.","metadata":{"version":"1.1.0","category":"Azure
         Active Directory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AAD/domainServices"},{"field":"Microsoft.AAD/domainServices/domainSecuritySettings.tlsV1","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3aa87b5a-7813-4b57-8a43-42dd9df5aaa7","type":"Microsoft.Authorization/policyDefinitions","name":"3aa87b5a-7813-4b57-8a43-42dd9df5aaa7"}'
     headers:
@@ -41395,7 +41395,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Synapse workspaces, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Dev"],"requestMessage":"Auto
@@ -43304,7 +43304,7 @@ interactions:
         a public IP address at the source or destination. The Private Link platform
         handles the connectivity between the consumer and services over the Azure
         backbone network. By mapping private endpoints to Azure Machine Learning workspaces,
-        data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.1.0","category":"Machine
+        data leakage risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.1.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"count":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","type":"Microsoft.Authorization/policyDefinitions","name":"40cec1dd-a100-4920-b15b-3024fe8901ab"}'
     headers:
@@ -44084,7 +44084,7 @@ interactions:
         Scope to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Monitor
-        private link scope. Learn more at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateDnsZoneId1":{"type":"String","metadata":{"displayName":"Private
+        private link scope. Learn more at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security#connect-to-a-private-endpoint.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateDnsZoneId1":{"type":"String","metadata":{"displayName":"Private
         DNS Zone for global endpoints used by Azure Monitor","description":"One of
         the five private DNS zone IDs required for Microsoft.Insights/privateLinkScopes
         to resolve a private DNS Zone to your Azure Monitor Private Link scope.","strongType":"Microsoft.Network/privateDnsZones","assignPermissions":true}},"privateDnsZoneId2":{"type":"String","metadata":{"displayName":"Private
@@ -45369,7 +45369,7 @@ interactions:
         public network access improves security by ensuring that the Azure Cache for
         Redis isn''t exposed on the public internet. You can limit exposure of your
         Azure Cache for Redis by creating private endpoints instead. Learn more at:
-        https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/Redis"},{"field":"Microsoft.Cache/Redis/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663","type":"Microsoft.Authorization/policyDefinitions","name":"470baccb-7e51-4549-8b1a-3e5be069f663"}'
     headers:
       cache-control:
@@ -46545,7 +46545,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination.  By mapping private endpoints to
         your Azure Data Factory, you can reduce data leakage risks.  Learn more at:
-        https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -48524,7 +48524,7 @@ interactions:
         DNS records allow private connections to private endpoints. Private endpoint
         connections allow secure communication by enabling private connectivity to
         Batch accounts without a need for public IP addresses at the source or destination.
-        For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
+        For more information on private endpoints and DNS zones in Batch, see https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
         private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -49313,7 +49313,7 @@ interactions:
         standards names","description":"For all compliance standards, leave it empty.
         For specific compliance standards, enter a list of standards names separated
         by semicolons ('';''). Compliance standards names are available through the
-        regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance
         control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"],"defaultValue":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
@@ -49623,7 +49623,7 @@ interactions:
         meet organizational security and compliance commitments. By default, Microsoft-managed
         encryption keys are used. For greater flexibility in managing keys or controlling
         access to your subscription, select customer-managed keys, also known as bring
-        your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
+        your own key (BYOK). Learn more about Azure Bot Service encryption: https://learn.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"}'
     headers:
@@ -50387,7 +50387,7 @@ interactions:
         local authentication methods disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         local authentication methods improves security by ensuring that Cosmos DB
         database accounts exclusively require Azure Active Directory identities for
-        authentication. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        authentication. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2","type":"Microsoft.Authorization/policyDefinitions","name":"5450f5bd-9c72-4390-a9c4-a7aba4edfdd2"}'
     headers:
@@ -51855,7 +51855,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to your CosmosDB account, data leakage
-        risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"}'
     headers:
@@ -52260,7 +52260,7 @@ interactions:
         should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Private
         link provides a way to connect Azure Key Vault Managed HSM to your Azure resources
         without sending traffic over the public internet. Private link provides defense
-        in depth protection against data exfiltration. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
+        in depth protection against data exfiltration. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*]","where":{"field":"Microsoft.KeyVault/managedHSMs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/59fee2f4-d439-4f1b-9b9a-982e1474bfd8","type":"Microsoft.Authorization/policyDefinitions","name":"59fee2f4-d439-4f1b-9b9a-982e1474bfd8"}'
     headers:
@@ -53524,7 +53524,7 @@ interactions:
         disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Synapse workspace so that it is not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        https://learn.microsoft.com/azure/synapse-analytics/security/connectivity-settings.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Synapse/workspaces/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c8cad01-ef30-4891-b230-652dadb4876a","type":"Microsoft.Authorization/policyDefinitions","name":"5c8cad01-ef30-4891-b230-652dadb4876a"}'
     headers:
       cache-control:
@@ -54710,7 +54710,7 @@ interactions:
         By default, system-assigned managed identity is used by Azure ML workspace
         to access the associated resources. User-assigned managed identity allows
         you to create the identity as an Azure resource and maintain the life cycle
-        of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
+        of that identity. Learn more at https://learn.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"}'
     headers:
@@ -56021,7 +56021,7 @@ interactions:
         only over encrypted channels, set the endpoint to a valid HTTPS URI. This
         ensures the HTTPS protocol is used to encrypt your data in transit and is
         also often a requirement for compliance with regulatory or industry standards.
-        Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
+        Please visit: https://learn.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy."},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"}'
     headers:
@@ -56898,7 +56898,7 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
+        key pair, also known as SSH keys. Learn more: https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest
         Configuration","version":"2.1.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include
         Arc connected servers","description":"By selecting this option, you agree
         to be charged monthly per Arc connected machine."},"allowedValues":["true","false"],"defaultValue":"false"},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -57300,7 +57300,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers: https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers: https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction.","metadata":{"version":"1.1.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerService/managedClusters","deploymentScope":"subscription","existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","equals":"true"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"},"clusterName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"},"clusterName":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -61474,7 +61474,7 @@ interactions:
         Defender''s extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from all nodes in
         the cluster and sends it to the Azure Defender for Kubernetes backend in the
-        cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        cloud for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"3.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"westeurope","properties":{"mode":"incremental","parameters":{"clusterRegion":{"value":"[field(''location'')]"},"clusterResourceId":{"value":"[field(''id'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterRegion":{"type":"string"},"clusterResourceId":{"type":"string"}},"variables":{"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","brazilsouth":"CQ","canadacentral":"CCA","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus":"EUS","eastus2":"EUS2","eastus2euap":"eus2p","germanywestcentral":"DEWC","francecentral":"PAR","japaneast":"EJP","koreacentral":"SE","northcentralus":"NCUS","northeurope":"NEU","norwayeast":"NOE","southafricanorth":"JNB","southcentralus":"SCUS","southeastasia":"SEA","swedencentral":"SEC","switzerlandnorth":"CHN","switzerlandwest":"CHW","uaenorth":"DXB","uksouth":"SUK","ukwest":"WUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2","usgovvirginia":"USGV","usgovarizona":"USGA","usgovtexas":"USGT","chinaeast":"CNE","chinaeast2":"CNE2","chinawest":"CNW","chinawest2":"CNW2"},"locationCode":"[variables(''locationLongNameToShortMap'')[parameters(''clusterRegion'')]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'',
         variables(''locationCode''))]","workspaceName":"[concat(''DefaultWorkspace-'',
         variables(''subscriptionId''),''-'', variables(''locationCode''))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'',
@@ -62460,7 +62460,7 @@ interactions:
         a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting
         App Service Apps in a virtual network unlocks advanced App Service networking
         and security features and provides you with greater control over your network
-        security configuration. Learn more at: https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
+        security configuration. Learn more at: https://learn.microsoft.com/azure/app-service/web-sites-integrate-with-vnet.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"Microsoft.Web/sites/virtualNetworkSubnetId","equals":""}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d04c29-f87d-4575-9731-419ff16a2757","type":"Microsoft.Authorization/policyDefinitions","name":"72d04c29-f87d-4575-9731-419ff16a2757"}'
     headers:
@@ -62557,7 +62557,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to Azure Synapse workspace, data leakage
-        risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"}'
     headers:
       cache-control:
@@ -62763,7 +62763,7 @@ interactions:
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation
         IDs","description":"For all recommendations, leave empty. For specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/en-us/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Determines recommendation severities. Example:
         High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation
@@ -63380,7 +63380,7 @@ interactions:
         for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access on a Batch account improves security by ensuring your
         Batch account can only be accessed from a private endpoint. Learn more about
-        disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        disabling public network access at https://learn.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"}'
     headers:
       cache-control:
@@ -64620,7 +64620,7 @@ interactions:
         lets you connect your virtual network to Azure services without a public IP
         address at the source or destination. By mapping private endpoints to your
         Azure Cache for Redis instances, data leakage risks are reduced. Learn more
-        at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        at: https://learn.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"}'
     headers:
       cache-control:
@@ -64907,7 +64907,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         Azure Machine Learning workspace, you can reduce data leakage risks. Learn
-        more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
+        more about private links at: https://learn.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -65004,7 +65004,7 @@ interactions:
         network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that your CosmosDB account
         isn''t exposed on the public internet. Creating private endpoints can limit
-        exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        exposure of your CosmosDB account. Learn more at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"}'
     headers:
@@ -66175,7 +66175,7 @@ interactions:
         private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Service
-        Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Bus namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -69462,7 +69462,7 @@ interactions:
         Managed HSM to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your Azure Key Vault Managed HSM so that it''s not
         accessible over the public internet. This can reduce data leakage risks. Learn
-        more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
+        more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link#allow-trusted-services-to-access-managed-hsm.","metadata":{"version":"2.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHSMs"},{"field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/18500a29-7fe2-46b2-a342-b16a415e101d"],"operations":[{"operation":"addOrReplace","field":"Microsoft.KeyVault/managedHSMs/networkAcls.defaultAction","value":"Deny"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456","type":"Microsoft.Authorization/policyDefinitions","name":"84d327c3-164a-4685-b453-900478614456"}'
     headers:
@@ -70430,7 +70430,7 @@ interactions:
         connections allow secure communication by enabling private connectivity to
         your Azure Data Factory without a need for public IP addresses at the source
         or destination. For more information on private endpoints and DNS zones in
-        Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        Azure Data Factory, see https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The
         private DNS zone to deploy in a new private DNS zone group and link to the
@@ -72380,7 +72380,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to Azure Data Factory, data leakage
-        risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
+        risks are reduced. Learn more about private links at: https://learn.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data
         Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"}'
     headers:
@@ -73349,7 +73349,7 @@ interactions:
         Defender''s extension for Azure Arc provides threat protection for your Arc
         enabled Kubernetes clusters. The extension collects data from nodes in the
         cluster and sends it to the Azure Defender for Kubernetes backend in the cloud
-        for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        for further analysis. Learn more in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"4.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","notEquals":"aks"},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"}'
     headers:
       cache-control:
@@ -73677,8 +73677,8 @@ interactions:
         be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. Azure Security Center supported endpoint
-        protection solutions are documented here - https://docs.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
-        Endpoint protection assessment is documented here - https://docs.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
+        protection solutions are documented here - https://learn.microsoft.com/azure/security-center/security-center-services?tabs=features-windows#supported-endpoint-protection-solutions.
+        Endpoint protection assessment is documented here - https://learn.microsoft.com/azure/security-center/security-center-endpoint-protection.","metadata":{"version":"1.0.0","category":"Security
         Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.HybridCompute/machines"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"37a3689a-818e-4a0e-82ac-b1392b9bb000","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","type":"Microsoft.Authorization/policyDefinitions","name":"8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2"}'
     headers:
@@ -74616,7 +74616,7 @@ interactions:
         endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Event
-        Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Hub namespaces, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"Specifies the subnet to use to configure
         private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -75789,7 +75789,7 @@ interactions:
         workspaces should use customer-managed keys","policyType":"BuiltIn","mode":"Indexed","description":"Ensure
         that Azure Log Search Alerts are implementing customer-managed keys, by storing
         the query text using the storage account that the customer had provided for
-        the queried Log Analytics workspace. For more information, visit https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        the queried Log Analytics workspace. For more information, visit https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled","Deny"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/scheduledqueryrules"},{"field":"Microsoft.Insights/scheduledqueryrules/checkWorkspaceAlertsStorageConfigured","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c1f94d-33b0-4062-bd04-1cdc3e7eece2","type":"Microsoft.Authorization/policyDefinitions","name":"94c1f94d-33b0-4062-bd04-1cdc3e7eece2"}'
     headers:
       cache-control:
@@ -76370,7 +76370,7 @@ interactions:
         network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling
         public network access improves security by ensuring that the resource isn''t
         exposed on the public internet. You can limit exposure of your Automation
-        account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        account resources by creating private endpoints instead. Learn more at: https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"}'
     headers:
       cache-control:
@@ -80601,7 +80601,7 @@ interactions:
         including environment hardening, workload protection, and run-time protection.
         When you enable the SecurityProfile.AzureDefender on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data. Learn more about Microsoft Defender for Containers in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
+        event data. Learn more about Microsoft Defender for Containers in https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction","metadata":{"version":"1.0.1-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/securityProfile.azureDefender.enabled","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","type":"Microsoft.Authorization/policyDefinitions","name":"a1840de2-8088-4ea8-b153-b4c723e9cb01"}'
     headers:
       cache-control:
@@ -81186,7 +81186,7 @@ interactions:
         HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To
         recreate activity trails for investigation purposes when a security incident
         occurs or when your network is compromised, you may want to audit by enabling
-        resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
+        resource logs on Managed HSMs. Please follow the instructions here: https://learn.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key
         Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required
         retention (days)","description":"The required resource logs retention in days"},"defaultValue":"365"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"}'
@@ -87667,7 +87667,7 @@ interactions:
       string: '{"properties":{"displayName":"Configure App Services to use private
         DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use private
         DNS zones to override the DNS resolution for a private endpoint. A private
-        DNS zone links a virtual network to an App Service. Learn more at: https://docs.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
+        DNS zone links a virtual network to an App Service. Learn more at: https://learn.microsoft.com/azure/app-service/networking/private-endpoint#dns.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         Dns Zone Id","description":"The private DNS zone to deploy in a new private
         DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -89224,7 +89224,7 @@ interactions:
         endpoints connect your virtual network to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to your
         CosmosDB account, you can reduce data leakage risks. Learn more about private
-        links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
+        links at: https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A
         subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A
         group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -89944,7 +89944,7 @@ interactions:
         IP address at the source or destination. The Private Link platform handles
         the connectivity between the consumer and services over the Azure backbone
         network. By mapping private endpoints to Event Hub namespaces, data leakage
-        risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        risks are reduced. Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"],"defaultValue":"AuditIfNotExists"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"}'
     headers:
@@ -93339,7 +93339,7 @@ interactions:
         endpoint connections allow secure communication by enabling private connectivity
         to Azure Automation accounts without a need for public IP addresses at the
         source or destination. Learn more about private endpoints in Azure Automation
-        at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        at https://learn.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"}'
@@ -98839,7 +98839,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -98850,7 +98850,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -98858,7 +98858,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event
         Hub details","description":"The Event Hub details of where the data should
         be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations
@@ -99775,7 +99775,7 @@ interactions:
         Managed HSM with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
-        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
+        Key Vault Managed HSM, you can reduce data leakage risks. Learn more at: https://learn.microsoft.com/azure/key-vault/managed-hsm/private-link.","metadata":{"version":"1.0.0-preview","category":"Key
         Vault","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -100844,7 +100844,7 @@ interactions:
         and for more control over the access to your data in Azure Monitor. Linking
         your component to a Log Analytics workspace that''s enabled with a customer-managed
         key, ensures that your Application Insights logs meet this compliance requirement,
-        see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"}'
     headers:
       cache-control:
@@ -102320,7 +102320,7 @@ interactions:
         public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         public network access for your CosmosDB resource so that it''s not accessible
         over the public internet. This can reduce data leakage risks. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"}'
@@ -102819,7 +102819,7 @@ interactions:
         to disable local authentication","policyType":"BuiltIn","mode":"Indexed","description":"Disable
         local authentication methods so that your Cosmos DB database accounts exclusively
         require Azure Active Directory identities for authentication. Learn more at:
-        https://docs.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
+        https://learn.microsoft.com/azure/cosmos-db/how-to-setup-rbac#disable-local-auth.","metadata":{"version":"1.0.0","category":"Cosmos
         DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Modify","Disabled"],"defaultValue":"Modify"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion,
         ''2021-06-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/disableLocalAuth","value":true}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc2d41d1-4ab1-4666-a3e1-3d51c43e0049","type":"Microsoft.Authorization/policyDefinitions","name":"dc2d41d1-4ab1-4666-a3e1-3d51c43e0049"}'
@@ -107244,7 +107244,7 @@ interactions:
         endpoints connect your virtual networks to Azure services without a public
         IP address at the source or destination. By mapping private endpoints to Azure
         Monitor Private Link Scopes, you can reduce data leakage risks. Learn more
-        about private links at: https://docs.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
+        about private links at: https://learn.microsoft.com/azure/azure-monitor/logs/private-link-security.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet ID","description":"A subnet with private endpoint network
         policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"],"defaultValue":"DeployIfNotExists"}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Insights/privateLinkScopes"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Insights/privateLinkScopes/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["azuremonitor"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8185402-357b-4768-8058-f620bc0ae6b5","type":"Microsoft.Authorization/policyDefinitions","name":"e8185402-357b-4768-8058-f620bc0ae6b5"}'
@@ -107965,7 +107965,7 @@ interactions:
         IP address at the source or destination. By mapping private endpoints to your
         site recovery resources of Recovery Services vaults, you can reduce data leakage
         risks. To use private links, managed service identity must be assigned to
-        Recovery Services Vaults. Learn more about private links at: https://docs.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
+        Recovery Services Vaults. Learn more about private links at: https://learn.microsoft.com/azure/site-recovery/azure-to-azure-how-to-enable-replication-private-endpoints.","metadata":{"version":"1.0.0-preview","category":"Site
         Recovery","preview":true},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private
         endpoint subnet id","description":"A subnet with private endpoint network
         policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -108353,7 +108353,7 @@ interactions:
         ensure secure data encryption is enabled at the service level and the infrastructure
         level with two different encryption algorithms and two different keys, use
         an Azure Monitor dedicated cluster. This option is enabled by default when
-        supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        supported at the region, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"}'
     headers:
       cache-control:
@@ -110283,7 +110283,7 @@ interactions:
         private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Event Hub namespaces.
-        Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
+        Learn more at: https://learn.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event
         Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -110595,7 +110595,7 @@ interactions:
         to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Azure Machine
-        Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
+        Learning workspaces. Learn more at: https://learn.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine
         Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone id","description":"A private DNS zone id to connect to the private
         endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -111874,7 +111874,7 @@ interactions:
         private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use
         private DNS zones to override the DNS resolution for a private endpoint. A
         private DNS zone links to your virtual network to resolve to Service Bus namespaces.
-        Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
+        Learn more at: https://learn.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service
         Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private
         DNS Zone ID","description":"Specifies the private DNS zone to use to configure
         private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
@@ -111986,7 +111986,7 @@ interactions:
         and this flag is set to ''true'' the policy will re-deploy the resource group.
         Please note this will reset any Azure Tag on the resource group."},"allowedValues":[true,false],"defaultValue":true},"alertName":{"type":"String","metadata":{"displayName":"Alert
         name contains","description":"String included in the required alert name.
-        For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
+        For a full reference list of Security Center''s alerts, see https://learn.microsoft.com/azure/security-center/alerts-reference."},"defaultValue":""},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic
         App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic
         app trigger","description":"The trigger connector of the logic app that is
@@ -115392,7 +115392,7 @@ interactions:
         storage account to Log Analytics workspace to protect saved-queries with storage
         account encryption. Customer-managed keys are commonly required to meet regulatory
         compliance and for more control over the access to your saved-queries in Azure
-        Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
+        Monitor. For more details on the above, see https://learn.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The
         effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"],"defaultValue":"audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"}'
     headers:
       cache-control:
@@ -115678,7 +115678,7 @@ interactions:
         internal encryption","policyType":"BuiltIn","mode":"Indexed","description":"Setting
         InternalEncryption to true encrypts the pagefile, worker disks, and internal
         network traffic between the front ends and workers in an App Service Environment.
-        To learn more, refer to https://docs.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
+        To learn more, refer to https://learn.microsoft.com/azure/app-service/environment/app-service-app-service-environment-custom-settings#enable-internal-encryption.","metadata":{"version":"1.0.0","category":"App
         Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable
         or disable the execution of the policy"},"allowedValues":["Audit","Disabled"],"defaultValue":"Audit"}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/hostingEnvironments"},{"field":"kind","like":"ASE*"},{"count":{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*]","where":{"allOf":[{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].name","equals":"InternalEncryption"},{"field":"Microsoft.Web/HostingEnvironments/clusterSettings[*].value","equals":"true"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb74e86f-d351-4b8d-b034-93da7391c01f","type":"Microsoft.Authorization/policyDefinitions","name":"fb74e86f-d351-4b8d-b034-93da7391c01f"}'
     headers:
@@ -117253,7 +117253,7 @@ interactions:
         IDs","description":"Applicable only for export of security recommendations.
         To export all recommendations, leave this empty. To export specific recommendations,
         enter a list of recommendation IDs separated by semicolons ('';''). Recommendation
-        IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments),
+        IDs are available through the Assessments API (https://learn.microsoft.com/rest/api/securitycenter/assessments),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."},"defaultValue":[]},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation
         severities","description":"Applicable only for export of security recommendations.
         Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include
@@ -117264,7 +117264,7 @@ interactions:
         controls. To export all secure score controls, leave this empty. To export
         specific secure score controls, enter a list of secure score controls IDs
         separated by semicolons ('';''). Secure score controls IDs are available through
-        the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols),
+        the Secure score controls API (https://learn.microsoft.com/rest/api/securitycenter/securescorecontrols),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."},"defaultValue":[]},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert
         severities","description":"Applicable only for export of security alerts.
         Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"],"defaultValue":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory
@@ -117272,7 +117272,7 @@ interactions:
         compliance. To export all regulatory compliance, leave this empty. To export
         specific regulatory compliance standards, enter a list of these standards
         names separated by semicolons ('';''). Regulatory compliance standards names
-        are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
+        are available through the regulatory compliance standards API (https://learn.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards),
         or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."},"defaultValue":[]},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log
         Analytics workspace","description":"The Log Analytics workspace of where the
         data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security
diff --git a/src/azure-cli/azure/cli/command_modules/role/_help.py b/src/azure-cli/azure/cli/command_modules/role/_help.py
index 96fcffb8ff2..35e7428dbe6 100644
--- a/src/azure-cli/azure/cli/command_modules/role/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/role/_help.py
@@ -22,7 +22,7 @@
 helps['ad app create'] = """
 type: command
 short-summary: Create an application.
-long-summary: For more detailed documentation, see https://docs.microsoft.com/graph/api/resources/application
+long-summary: For more detailed documentation, see https://learn.microsoft.com/graph/api/resources/application
 examples:
   - name: Create an application.
     text: |
@@ -344,7 +344,7 @@
 """
 
 # The example is from
-# https://docs.microsoft.com/en-us/azure/active-directory/develop/workload-identity-federation-create-trust-github?tabs=microsoft-graph
+# https://learn.microsoft.com/en-us/azure/active-directory/develop/workload-identity-federation-create-trust-github?tabs=microsoft-graph
 helps['ad app federated-credential create'] = """
 type: command
 short-summary: Create application federated identity credential.
diff --git a/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_client.py b/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_client.py
index c4152a263d6..fb1cdfc550b 100644
--- a/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_client.py
+++ b/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_client.py
@@ -87,22 +87,22 @@ def _send(self, method, url, param=None, body=None, api_version=V1_0):
     # filter is python built-in name: https://docs.python.org/3/library/functions.html#filter
 
     def application_list(self, filter=None):
-        # https://docs.microsoft.com/en-us/graph/api/application-list
+        # https://learn.microsoft.com/en-us/graph/api/application-list
         result = self._send("GET", "/applications" + _filter_to_query(filter))
         return result
 
     def application_create(self, body):
-        # https://docs.microsoft.com/en-us/graph/api/application-post-applications
+        # https://learn.microsoft.com/en-us/graph/api/application-post-applications
         result = self._send("POST", "/applications", body=body)
         return result
 
     def application_get(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/application-get
+        # https://learn.microsoft.com/en-us/graph/api/application-get
         result = self._send("GET", "/applications/{id}".format(id=id))
         return result
 
     def application_update(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/application-update
+        # https://learn.microsoft.com/en-us/graph/api/application-update
         # AD Graph SDK uses verb 'patch', instead of 'update':
         #   azure.graphrbac.operations.applications_operations.ApplicationsOperations.patch
         # We use 'update' to align with other update operations:
@@ -111,45 +111,45 @@ def application_update(self, id, body):
         return result
 
     def application_delete(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/application-delete
+        # https://learn.microsoft.com/en-us/graph/api/application-delete
         result = self._send("DELETE", "/applications/{id}".format(id=id))
         return result
 
     def application_owner_list(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/application-list-owners
+        # https://learn.microsoft.com/en-us/graph/api/application-list-owners
         result = self._send("GET", "/applications/{id}/owners".format(id=id))
         return result
 
     def application_owner_add(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/application-post-owners
+        # https://learn.microsoft.com/en-us/graph/api/application-post-owners
         result = self._send("POST", "/applications/{id}/owners/$ref".format(id=id), body=body)
         return result
 
     def application_owner_remove(self, id, owner_id):
-        # https://docs.microsoft.com/en-us/graph/api/application-delete-owners
+        # https://learn.microsoft.com/en-us/graph/api/application-delete-owners
         result = self._send("DELETE", "/applications/{id}/owners/{owner_id}/$ref".format(id=id, owner_id=owner_id))
         return result
 
     def application_add_password(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/application-addpassword
+        # https://learn.microsoft.com/en-us/graph/api/application-addpassword
         # 'addPassword' appears in the API, so we keep its name, instead of using application_password_add
         result = self._send("POST", "/applications/{id}/addPassword".format(id=id), body=body)
         return result
 
     def application_remove_password(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/application-removepassword
+        # https://learn.microsoft.com/en-us/graph/api/application-removepassword
         result = self._send("POST", "/applications/{id}/removePassword".format(id=id), body=body)
         return result
 
     def application_federated_identity_credential_list(self, application_id, filter=None):
-        # https://docs.microsoft.com/en-us/graph/api/application-list-federatedidentitycredentials
+        # https://learn.microsoft.com/en-us/graph/api/application-list-federatedidentitycredentials
         result = self._send(
             "GET",
             f"/applications/{application_id}/federatedIdentityCredentials" + _filter_to_query(filter))
         return result
 
     def application_federated_identity_credential_create(self, application_id, body):
-        # https://docs.microsoft.com/en-us/graph/api/application-post-federatedidentitycredentials
+        # https://learn.microsoft.com/en-us/graph/api/application-post-federatedidentitycredentials
         result = self._send(
             "POST",
             f"/applications/{application_id}/federatedIdentityCredentials",
@@ -157,7 +157,7 @@ def application_federated_identity_credential_create(self, application_id, body)
         return result
 
     def application_federated_identity_credential_get(self, application_id, federated_identity_credential_id_or_name):
-        # https://docs.microsoft.com/en-us/graph/api/federatedidentitycredential-get
+        # https://learn.microsoft.com/en-us/graph/api/federatedidentitycredential-get
         result = self._send(
             "GET",
             f"/applications/{application_id}/federatedIdentityCredentials/{federated_identity_credential_id_or_name}")
@@ -165,7 +165,7 @@ def application_federated_identity_credential_get(self, application_id, federate
 
     def application_federated_identity_credential_update(
             self, application_id, federated_identity_credential_id_or_name, body):
-        # https://docs.microsoft.com/en-us/graph/api/federatedidentitycredential-update
+        # https://learn.microsoft.com/en-us/graph/api/federatedidentitycredential-update
         result = self._send(
             "PATCH",
             f"/applications/{application_id}/federatedIdentityCredentials/{federated_identity_credential_id_or_name}",
@@ -173,169 +173,169 @@ def application_federated_identity_credential_update(
         return result
 
     def application_federated_identity_credential_delete(self, application_id, federated_identity_credential_id_or_name):
-        # https://docs.microsoft.com/en-us/graph/api/federatedidentitycredential-delete
+        # https://learn.microsoft.com/en-us/graph/api/federatedidentitycredential-delete
         result = self._send(
             "DELETE",
             f"/applications/{application_id}/federatedIdentityCredentials/{federated_identity_credential_id_or_name}")
         return result
 
     def service_principal_list(self, filter=None):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-list
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-list
         result = self._send("GET", "/servicePrincipals" + _filter_to_query(filter))
         return result
 
     def service_principal_create(self, body):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-post-serviceprincipals
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-post-serviceprincipals
         result = self._send("POST", "/servicePrincipals", body=body)
         return result
 
     def service_principal_get(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-get
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-get
         result = self._send("GET", "/servicePrincipals/{id}".format(id=id))
         return result
 
     def service_principal_update(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-update
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-update
         result = self._send("PATCH", "/servicePrincipals/{id}".format(id=id), body=body)
         return result
 
     def service_principal_delete(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-delete
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-delete
         result = self._send("DELETE", "/servicePrincipals/{id}".format(id=id))
         return result
 
     def service_principal_add_password(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-addpassword
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-addpassword
         result = self._send("POST", "/servicePrincipals/{id}/addPassword".format(id=id), body=body)
         return result
 
     def service_principal_remove_password(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-removepassword
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-removepassword
         result = self._send("POST", "/servicePrincipals/{id}/removePassword".format(id=id), body=body)
         return result
 
     def service_principal_owner_list(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-list-owners
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-list-owners
         result = self._send("GET", "/servicePrincipals/{id}/owners".format(id=id))
         return result
 
     def owned_objects_list(self):
-        # https://docs.microsoft.com/en-us/graph/api/user-list-ownedobjects
+        # https://learn.microsoft.com/en-us/graph/api/user-list-ownedobjects
         result = self._send("GET", "/me/ownedObjects")
         return result
 
     def signed_in_user_get(self):
-        # https://docs.microsoft.com/en-us/graph/api/user-get
+        # https://learn.microsoft.com/en-us/graph/api/user-get
         result = self._send("GET", "/me")
         return result
 
     def directory_object_get_by_ids(self, body):
-        # https://docs.microsoft.com/en-us/graph/api/directoryobject-getbyids
+        # https://learn.microsoft.com/en-us/graph/api/directoryobject-getbyids
         result = self._send("POST", "/directoryObjects/getByIds", body=body)
         return result
 
     def directory_object_check_member_groups(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/directoryobject-checkmembergroups
+        # https://learn.microsoft.com/en-us/graph/api/directoryobject-checkmembergroups
         result = self._send("POST", "/directoryObjects/{id}/checkMemberGroups".format(id=id), body=body)
         return result
 
     def group_get_member_groups(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/directoryobject-getmembergroups
+        # https://learn.microsoft.com/en-us/graph/api/directoryobject-getmembergroups
         result = self._send("POST", "/groups/{id}/getMemberGroups".format(id=id), body=body)
         return result
 
     def group_list(self, filter=None):
-        # https://docs.microsoft.com/en-us/graph/api/group-list
+        # https://learn.microsoft.com/en-us/graph/api/group-list
         result = self._send("GET", "/groups" + _filter_to_query(filter))
         return result
 
     def group_create(self, body):
-        # https://docs.microsoft.com/en-us/graph/api/group-post-groups
+        # https://learn.microsoft.com/en-us/graph/api/group-post-groups
         result = self._send("POST", "/groups", body=body)
         return result
 
     def group_get(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/group-get
+        # https://learn.microsoft.com/en-us/graph/api/group-get
         result = self._send("GET", "/groups/{id}".format(id=id))
         return result
 
     def group_delete(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/group-delete
+        # https://learn.microsoft.com/en-us/graph/api/group-delete
         result = self._send("DELETE", "/groups/{id}".format(id=id))
         return result
 
     def group_owner_list(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/group-list-owners
+        # https://learn.microsoft.com/en-us/graph/api/group-list-owners
         result = self._send("GET", "/groups/{id}/owners".format(id=id))
         return result
 
     def group_owner_add(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/group-post-owners
+        # https://learn.microsoft.com/en-us/graph/api/group-post-owners
         result = self._send("POST", "/groups/{id}/owners/$ref".format(id=id), body=body)
         return result
 
     def group_owner_remove(self, id, owner_id):
-        # https://docs.microsoft.com/en-us/graph/api/group-delete-owners
+        # https://learn.microsoft.com/en-us/graph/api/group-delete-owners
         result = self._send("DELETE", "/groups/{id}/owners/{owner_id}/$ref".format(id=id, owner_id=owner_id))
         return result
 
     def group_member_list(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/group-list-members
+        # https://learn.microsoft.com/en-us/graph/api/group-list-members
         result = self._send("GET", '/groups/{id}/members'.format(id=id))
         return result
 
     def group_member_add(self, id, body):
-        # https://docs.microsoft.com/en-us/graph/api/group-post-members
+        # https://learn.microsoft.com/en-us/graph/api/group-post-members
         result = self._send("POST", "/groups/{id}/members/$ref".format(id=id), body=body)
         return result
 
     def group_member_remove(self, id, member_id):
-        # https://docs.microsoft.com/en-us/graph/api/group-delete-members
+        # https://learn.microsoft.com/en-us/graph/api/group-delete-members
         result = self._send("DELETE", "/groups/{id}/members/{member_id}/$ref".format(id=id, member_id=member_id))
         return result
 
     def user_list(self, filter):
-        # https://docs.microsoft.com/graph/api/user-list
+        # https://learn.microsoft.com/graph/api/user-list
         result = self._send("GET", "/users" + _filter_to_query(filter))
         return result
 
     def user_create(self, body):
-        # https://docs.microsoft.com/graph/api/user-post-users
+        # https://learn.microsoft.com/graph/api/user-post-users
         result = self._send("POST", "/users", body=body)
         return result
 
     def user_get(self, id_or_upn):
-        # https://docs.microsoft.com/graph/api/user-get
+        # https://learn.microsoft.com/graph/api/user-get
         result = self._send("GET", "{}".format(_get_user_url(id_or_upn)))
         return result
 
     def user_update(self, id_or_upn, body):
-        # https://docs.microsoft.com/graph/api/user-update
+        # https://learn.microsoft.com/graph/api/user-update
         result = self._send("PATCH", "{}".format(_get_user_url(id_or_upn)), body=body)
         return result
 
     def user_delete(self, id_or_upn):
-        # https://docs.microsoft.com/graph/api/user-delete
+        # https://learn.microsoft.com/graph/api/user-delete
         result = self._send("DELETE", "{}".format(_get_user_url(id_or_upn)))
         return result
 
     def user_get_member_groups(self, id_or_upn, body):
-        # https://docs.microsoft.com/en-us/graph/api/directoryobject-getmembergroups
+        # https://learn.microsoft.com/en-us/graph/api/directoryobject-getmembergroups
         result = self._send("POST", "{}/getMemberGroups".format(_get_user_url(id_or_upn)), body=body)
         return result
 
     def oauth2_permission_grant_list(self, filter=None):
-        # https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-list
+        # https://learn.microsoft.com/en-us/graph/api/oauth2permissiongrant-list
         result = self._send("GET", "/oauth2PermissionGrants" + _filter_to_query(filter))
         return result
 
     def oauth2_permission_grant_create(self, body):
-        # https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-post
+        # https://learn.microsoft.com/en-us/graph/api/oauth2permissiongrant-post
         result = self._send("POST", "/oauth2PermissionGrants", body=body)
         return result
 
     def oauth2_permission_grant_delete(self, id):
-        # https://docs.microsoft.com/en-us/graph/api/oauth2permissiongrant-delete
+        # https://learn.microsoft.com/en-us/graph/api/oauth2permissiongrant-delete
         result = self._send("DELETE", "/oAuth2PermissionGrants/{id}".format(id=id))
         return result
 
@@ -355,7 +355,7 @@ def tenant(self):
 
 def _filter_to_query(filter):
     if filter is not None:
-        # https://docs.microsoft.com/en-us/graph/query-parameters#encoding-query-parameters
+        # https://learn.microsoft.com/en-us/graph/query-parameters#encoding-query-parameters
         # The values of query parameters should be percent-encoded.
         from urllib.parse import quote
         return "?$filter={}".format(quote(filter, safe=''))
@@ -364,8 +364,8 @@ def _filter_to_query(filter):
 
 def _get_user_url(id_or_upn):
     # Correctly handle $ and # in upn according to
-    # https://docs.microsoft.com/en-us/graph/api/user-get
-    # https://docs.microsoft.com/en-us/graph/known-issues#users
+    # https://learn.microsoft.com/en-us/graph/api/user-get
+    # https://learn.microsoft.com/en-us/graph/known-issues#users
 
     # UPN
     if '@' in id_or_upn:
diff --git a/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_objects.py b/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_objects.py
index 5615232ef77..cfe9f981a04 100644
--- a/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_objects.py
+++ b/src/azure-cli/azure/cli/command_modules/role/_msgrpah/_graph_objects.py
@@ -6,7 +6,7 @@
 
 # property_map is a map from CLI argument name to API property name, such as display_name -> displayName.
 
-# https://docs.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0
+# https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0
 _application_property_map = {
     # base properties
     'display_name': 'displayName',
@@ -28,7 +28,7 @@
     'required_resource_accesses': 'requiredResourceAccess',
 }
 
-# https://docs.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0#properties
+# https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0#properties
 _user_property_map = {
     # base properties
     'account_enabled': 'accountEnabled',
@@ -40,7 +40,7 @@
     'force_change_password_next_sign_in': ['passwordProfile', 'forceChangePasswordNextSignIn']
 }
 
-# https://docs.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties
+# https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties
 _group_property_map = {
     'display_name': 'displayName',
     'mail_nickname': 'mailNickname',
diff --git a/src/azure-cli/azure/cli/command_modules/role/_params.py b/src/azure-cli/azure/cli/command_modules/role/_params.py
index 188a72a9828..9f74ca00eb4 100644
--- a/src/azure-cli/azure/cli/command_modules/role/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/role/_params.py
@@ -108,19 +108,19 @@ def load_arguments(self, _):
         c.argument('optional_claims', arg_group='JSON property', type=validate_file_or_dict,
                    help="Application developers can configure optional claims in their Microsoft Entra applications to "
                         "specify the claims that are sent to their application by the Microsoft security token "
-                        "service. For more information, see https://docs.microsoft.com/azure/active-directory/develop"
+                        "service. For more information, see https://learn.microsoft.com/azure/active-directory/develop"
                         "/active-directory-optional-claims. " + JSON_PROPERTY_HELP)
 
     with self.argument_context('ad app owner list') as c:
         c.argument('identifier', options_list=['--id'], help='identifier uri, application id, or object id of the application')
 
     with self.argument_context('ad app permission') as c:
-        # https://docs.microsoft.com/en-us/graph/api/resources/requiredresourceaccess
+        # https://learn.microsoft.com/en-us/graph/api/resources/requiredresourceaccess
         c.argument('api',
                    help='requiredResourceAccess.resourceAppId - '
                         'The unique identifier for the resource that the application requires access to. '
                         'This should be equal to the appId declared on the target resource application.')
-        # https://docs.microsoft.com/en-us/graph/api/resources/resourceaccess
+        # https://learn.microsoft.com/en-us/graph/api/resources/resourceaccess
         c.argument('api_permissions', nargs='+',
                    help='Space-separated list of {id}={type}. '
                         "{id} is resourceAccess.id - The unique identifier for one of the oauth2PermissionScopes or "
diff --git a/src/azure-cli/azure/cli/command_modules/role/custom.py b/src/azure-cli/azure/cli/command_modules/role/custom.py
index c011f47d480..20bdec3fac8 100644
--- a/src/azure-cli/azure/cli/command_modules/role/custom.py
+++ b/src/azure-cli/azure/cli/command_modules/role/custom.py
@@ -4,11 +4,11 @@
 # --------------------------------------------------------------------------------------------
 
 """
-`az ad` module has been migrated to use Microsoft Graph API: https://docs.microsoft.com/en-us/graph/api/overview
+`az ad` module has been migrated to use Microsoft Graph API: https://learn.microsoft.com/en-us/graph/api/overview
 
 See:
 Property differences between Azure AD Graph and Microsoft Graph
-https://docs.microsoft.com/en-us/graph/migrate-azure-ad-graph-property-differences
+https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-property-differences
 """
 
 import base64
@@ -553,7 +553,7 @@ def _search_role_assignments(cli_ctx, assignments_client, definitions_client,
     if assignee:
         assignee_object_id = _resolve_object_id(cli_ctx, assignee, fallback_to_object_id=True)
 
-    # https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-list-rest
+    # https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-list-rest
     # "atScope()" and "principalId eq '{value}'" query cannot be used together (API limitation).
     # always use "scope" if provided, so we can get assignments beyond subscription e.g. management groups
     if scope:
@@ -707,7 +707,7 @@ def create_application(cmd, client, display_name, identifier_uris=None,
         result = graph_client.application_create(body)
     except GraphError as ex:
         if 'insufficient privileges' in str(ex).lower():
-            link = 'https://docs.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal'  # pylint: disable=line-too-long
+            link = 'https://learn.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal'  # pylint: disable=line-too-long
             raise CLIError("Directory permission is needed for the current user to register the application. "
                            "For how to configure, please refer '{}'. Original error: {}".format(link, ex))
         raise
@@ -1202,7 +1202,7 @@ def create_service_principal_for_rbac(
 
     if cert or create_cert:
         # Key credential is created *at the same time* of application creation.
-        # https://docs.microsoft.com/en-us/graph/application-rollkey-prooftoken
+        # https://learn.microsoft.com/en-us/graph/application-rollkey-prooftoken
         use_cert = True
         public_cert_string, cert_file, cert_start_date, cert_end_date = \
             _process_certificate(
@@ -1227,7 +1227,7 @@ def create_service_principal_for_rbac(
         graph_client.application_remove_password(aad_application[ID], body)
 
     # Password credential is created *after* application creation.
-    # https://docs.microsoft.com/en-us/graph/api/resources/passwordcredential
+    # https://learn.microsoft.com/en-us/graph/api/resources/passwordcredential
     if not use_cert:
         result = _application_add_password(graph_client, aad_application, 'rbac', app_start_date, app_end_date)
         password = result['secretText']
@@ -1583,12 +1583,12 @@ def _resolve_object_id_and_type(cli_ctx, assignee, fallback_to_object_id=False):
 def _get_object_stubs(graph_client, assignees):
     result = []
     assignees = list(assignees)  # callers could pass in a set
-    # Per https://docs.microsoft.com/en-us/graph/api/directoryobject-getbyids
+    # Per https://learn.microsoft.com/en-us/graph/api/directoryobject-getbyids
     # > You can specify up to 1000 IDs.
     for i in range(0, len(assignees), 1000):
         body = {
             "ids": assignees[i:i + 1000],
-            # According to https://docs.microsoft.com/en-us/graph/api/directoryobject-getbyids,
+            # According to https://learn.microsoft.com/en-us/graph/api/directoryobject-getbyids,
             # directoryObject should work as all of the resource types defined in the directory, but it doesn't.
             "types": ['user', 'group', 'servicePrincipal', 'directoryObjectPartnerReference']
         }
@@ -1626,7 +1626,7 @@ def _datetime_to_utc(dt):
 
 
 def _build_required_resource_accesses(required_resource_accesses):
-    # https://docs.microsoft.com/en-us/graph/api/resources/requiredresourceaccess
+    # https://learn.microsoft.com/en-us/graph/api/resources/requiredresourceaccess
     if isinstance(required_resource_accesses, dict):
         logger.info('Getting "requiredResourceAccess" from a full manifest')
         required_resource_accesses = required_resource_accesses.get('requiredResourceAccess', [])
@@ -1634,7 +1634,7 @@ def _build_required_resource_accesses(required_resource_accesses):
 
 
 def _build_app_roles(app_roles):
-    # https://docs.microsoft.com/en-us/graph/api/resources/approle
+    # https://learn.microsoft.com/en-us/graph/api/resources/approle
     if isinstance(app_roles, dict):
         logger.info('Getting "appRoles" from a full manifest')
         app_roles = app_roles.get('appRoles', [])
@@ -1646,8 +1646,8 @@ def _build_app_roles(app_roles):
 
 
 def _build_optional_claims(optional_claims):
-    # https://docs.microsoft.com/en-us/graph/api/resources/optionalclaim
-    # https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims#configuring-optional-claims
+    # https://learn.microsoft.com/en-us/graph/api/resources/optionalclaim
+    # https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims#configuring-optional-claims
     if 'optionalClaims' in optional_claims:
         logger.info('Getting "optionalClaims" from a full manifest')
         optional_claims = optional_claims.get('optionalClaims', [])
@@ -1655,7 +1655,7 @@ def _build_optional_claims(optional_claims):
 
 
 def _build_add_password_credential_body(display_name, start_datetime, end_datetime):
-    # https://docs.microsoft.com/en-us/graph/api/resources/passwordcredential
+    # https://learn.microsoft.com/en-us/graph/api/resources/passwordcredential
     body = {
         "passwordCredential": {
             "displayName": display_name,
@@ -1685,7 +1685,7 @@ def _build_key_credentials(key_value=None, key_type=None, key_usage=None,
     key_type = key_type or 'AsymmetricX509Cert'
     key_usage = key_usage or 'Verify'
 
-    # https://docs.microsoft.com/en-us/graph/api/resources/keycredential
+    # https://learn.microsoft.com/en-us/graph/api/resources/keycredential
     key_credential = {
         "@odata.type": "#microsoft.graph.keyCredential",
         "displayName": display_name,
@@ -1712,8 +1712,8 @@ def _reset_credential(cmd, graph_object, add_password_func, remove_password_func
     :param patch_func: Patch API function. Used to update keyCredentials.
     """
 
-    # https://docs.microsoft.com/en-us/graph/api/resources/passwordcredential
-    # https://docs.microsoft.com/en-us/graph/api/resources/keycredential
+    # https://learn.microsoft.com/en-us/graph/api/resources/passwordcredential
+    # https://learn.microsoft.com/en-us/graph/api/resources/keycredential
     # Only displayName should be set.
     # For passwordCredential, customKeyIdentifier is not applicable.
     # For keyCredential, customKeyIdentifier is automatically computed by Graph service as certificate thumbprint.
@@ -2008,7 +2008,7 @@ def _build_directory_object_json(client, object_id):
 
 def _get_member_groups(get_member_group_func, identifier, security_enabled_only):
     """Call 'directoryObject: getMemberGroups' API with specified get_member_group_func.
-    https://docs.microsoft.com/en-us/graph/api/directoryobject-getmembergroups
+    https://learn.microsoft.com/en-us/graph/api/directoryobject-getmembergroups
     """
     body = {
         "securityEnabledOnly": security_enabled_only
diff --git a/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_graph.py b/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_graph.py
index eb770acf3bc..57df1b5a085 100644
--- a/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_graph.py
+++ b/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_graph.py
@@ -14,7 +14,7 @@
 
 
 # This test example is from
-# https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps#example-user-app-role
+# https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps#example-user-app-role
 TEST_APP_ROLES = '''[
     {
         "allowedMemberTypes": [
@@ -40,7 +40,7 @@
 '''
 
 # This test example is from
-# https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims#configuring-optional-claims
+# https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims#configuring-optional-claims
 TEST_OPTIONAL_CLAIMS = '''{
     "idToken": [
         {
@@ -95,7 +95,7 @@
 '''
 
 # This test example is from
-# https://docs.microsoft.com/en-us/azure/active-directory/develop/workload-identity-federation-create-trust-github?tabs=microsoft-graph
+# https://learn.microsoft.com/en-us/azure/active-directory/develop/workload-identity-federation-create-trust-github?tabs=microsoft-graph
 TEST_FEDERATED_IDENTITY_CREDENTIAL = '''{
     "name": "Testing",
     "issuer": "https://token.actions.githubusercontent.com/",
@@ -208,7 +208,7 @@ def test_app_scenario(self):
         display_name = self.create_random_name(prefix='azure-cli-test', length=30)
 
         # identifierUris must be on verified domain
-        # https://docs.microsoft.com/en-us/azure/active-directory/develop/security-best-practices-for-app-registration#appid-uri-configuration
+        # https://learn.microsoft.com/en-us/azure/active-directory/develop/security-best-practices-for-app-registration#appid-uri-configuration
         self.kwargs.update({
             'display_name': display_name,
             'identifier_uri': f'api://{display_name}',
@@ -1020,5 +1020,5 @@ def test_user_list(self):
 
 def _get_id_from_value(permissions, value):
     """Get id from value for appRoles or oauth2PermissionScopes."""
-    # https://docs.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0#properties
+    # https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0#properties
     return next(p['id'] for p in permissions if p['value'] == value)
diff --git a/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_role_commands_thru_mock.py b/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_role_commands_thru_mock.py
index 3a6f4f6885d..100ace34853 100644
--- a/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_role_commands_thru_mock.py
+++ b/src/azure-cli/azure/cli/command_modules/role/tests/latest/test_role_commands_thru_mock.py
@@ -75,7 +75,7 @@
     'appId': MOCKED_APP_APP_ID
 }
 
-# Example from https://docs.microsoft.com/en-us/graph/api/serviceprincipal-addpassword
+# Example from https://learn.microsoft.com/en-us/graph/api/serviceprincipal-addpassword
 MOCKED_ADD_PASSWORD_RESULT = {
     "customKeyIdentifier": None,
     "endDateTime": "2021-09-09T19:50:29.3086381Z",
@@ -337,7 +337,7 @@ def test_create_for_rbac_failed_with_polished_error_if_due_to_permission(self, g
             create_service_principal_for_rbac(cmd, 'will-fail')
 
         # assert we handled such error
-        self.assertTrue('https://docs.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal' in str(context.exception))
+        self.assertTrue('https://learn.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal' in str(context.exception))
 
     @mock.patch('azure.cli.command_modules.role.custom._auth_client_factory', autospec=True)
     @mock.patch('azure.cli.command_modules.role.custom._graph_client_factory', autospec=True)
diff --git a/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_alerts.yaml b/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_alerts.yaml
index a69a33ba527..bd2752422f7 100644
--- a/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_alerts.yaml
+++ b/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_alerts.yaml
@@ -76,7 +76,7 @@ interactions:
         as part of an attack campaign over WordPress.\",\"remediationSteps\":[\"1.
         If WordPress is installed, make sure that the application is up to date and
         automatic updates are enabled.\",\"2. If only specific IP addresses should
-        be allowed to access the web app, set IP restrictions (https://docs.microsoft.com/azure/app-service/app-service-ip-restrictions)
+        be allowed to access the web app, set IP restrictions (https://learn.microsoft.com/azure/app-service/app-service-ip-restrictions)
         for it.\"],\"extendedProperties\":{\"sample Source IP Addresses\":\"00.00.00.00\",\"sample
         User Agents\":\"Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:48.0)+Gecko/20100101+Firefox/48.0,
         Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/63.0.3239.132+Safari/537.36\",\"last
@@ -318,7 +318,7 @@ interactions:
         Someone has extracted a massive amount of data from your SQL Server 'Sample-SQL'
         to an unusual location.\",\"remediationSteps\":[\"{\\\"displayValue\\\":\\\"Be
         sure to secure the new copy of your SQL server in the unusual storage account
-        and follow the principle of \\\\\\\"least privilege\\\\\\\" for your SQL server\\\",\\\"kind\\\":\\\"Link\\\",\\\"value\\\":\\\"https:\\\\/\\\\/docs.microsoft.com\\\\/en-us\\\\/dotnet\\\\/framework\\\\/data\\\\/adonet\\\\/sql\\\\/authorization-and-permissions-in-sql-server\\\"}\"],\"extendedProperties\":{\"resourceType\":\"SQL
+        and follow the principle of \\\\\\\"least privilege\\\\\\\" for your SQL server\\\",\\\"kind\\\":\\\"Link\\\",\\\"value\\\":\\\"https:\\\\/\\\\/learn.microsoft.com\\\\/en-us\\\\/dotnet\\\\/framework\\\\/data\\\\/adonet\\\\/sql\\\\/authorization-and-permissions-in-sql-server\\\"}\"],\"extendedProperties\":{\"resourceType\":\"SQL
         Database\",\"client IP Address\":\"00.00.00.00\",\"client Principal Name\":\"Sample-account\",\"client
         Application\":\"Sample-app\",\"storage Name\":\"Sample-storage\",\"killChainIntent\":\"Exfiltration\"},\"entities\":[{\"$id\":\"centralus_63\",\"location\":{\"countryName\":\"US\",\"city\":\"New
         York\"},\"isValid\":false,\"type\":\"ip\"},{\"$id\":\"centralus_64\",\"resourceId\":\"/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/Sample-RG/providers/Microsoft.Sql/servers/Sample-SQL/databases/Sample-DB\",\"type\":\"azure-resource\"},{\"$id\":\"centralus_65\",\"sourceAddress\":{\"$ref\":\"centralus_63\"},\"protocol\":\"Tcp\",\"type\":\"network-connection\"}],\"alertUri\":\"https://portal.azure.com/#blade/Microsoft_Azure_Security_AzureDefenderForData/AlertBlade/alertId/2517336241464862413_a63a7b5f-ba11-4c0e-9752-865ce7f32982/subscriptionId/487bb485-b5b0-471e-9c0d-10717612f869/resourceGroup/Sample-RG/referencedFrom/alertDeepLink/location/centralus\"}},{\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Sample-RG/providers/Microsoft.Security/locations/centralus/alerts/2517336241564549599_50f651d1-6214-4500-99ae-e64fd3c77fae\",\"name\":\"2517336241564549599_50f651d1-6214-4500-99ae-e64fd3c77fae\",\"type\":\"Microsoft.Security/Locations/alerts\",\"properties\":{\"status\":\"Active\",\"timeGeneratedUtc\":\"2022-11-17T09:18:05.793991Z\",\"processingEndTimeUtc\":\"2022-11-17T09:18:03.54504Z\",\"version\":\"2022-01-01.0\",\"vendorName\":\"Microsoft\",\"productName\":\"Microsoft
@@ -765,8 +765,8 @@ interactions:
         ALERT] Access from a suspicious IP to a storage file share\",\"description\":\"THIS
         IS A SAMPLE ALERT: Someone has accessed your Azure storage account 'Sample-Storage'
         from a suspicious IP address.\",\"remediationSteps\":[\"\u2022 Limit access
-        to your storage account, following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        to your storage account, following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -792,7 +792,7 @@ interactions:
         file in your Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022
         Delete the .exe from your storage account.\",\"\u2022 Limit access to your
         storage account, following the 'least privilege' principle. Consider using
-        identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview.\",\"\u2022
+        identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview.\",\"\u2022
         Rotate all storage account keys that may be compromised and ensure that your
         storage account keys are only shared with authorized users.\",\"\u2022 Ensure
         that storage account keys are stored in a secured location such as Azure Key
@@ -819,7 +819,7 @@ interactions:
         IS A SAMPLE ALERT: Someone has performed an unusual change of access permissions
         of a directory or a file in your Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022
         Limit access to your storage account, following the 'least privilege' principle.
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview.\",\"\u2022
         Rotate all storage account keys that may be compromised and ensure that your
         storage account keys are only shared with authorized users.\",\"\u2022 Ensure
         that storage directory or file permissions are configured correctly.\",\"\u2022
@@ -833,7 +833,7 @@ interactions:
         steps\":\"\u2022 Confirm whether the directory or file permissions change
         was performed for a legitimate purpose.\\r\\n\u2022 Review the directory's
         or file's access permissions to make sure they are expected. NTFS permissions
-        can be assigned at the directory or file level: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-enable#3-configure-ntfs-permissions-over-smb
+        can be assigned at the directory or file level: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-enable#3-configure-ntfs-permissions-over-smb
         .\\r\\n\u2022 View related storage activity using Storage Analytics Logging.
         See how to configure Storage Analytics logging and more information: https://go.microsoft.com/fwlink/?linkid=2075734\",\"alert
         Id\":\"00000000-0000-0000-0000-000000000000\",\"authentication type\":\"Kerberos\",\"client
@@ -848,7 +848,7 @@ interactions:
         IS A SAMPLE ALERT: Someone has uploaded potential malware to your Azure storage
         account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Remove the malicious
         file from your storage account.\",\"\u2022 Limit access to your storage account,
-        following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -882,8 +882,8 @@ interactions:
         ALERT] Access from an unusual location to a storage file share\",\"description\":\"THIS
         IS A SAMPLE ALERT: Someone has accessed your Azure storage account 'Sample-Storage'
         from an unusual location.\",\"remediationSteps\":[\"\u2022 Limit access to
-        your storage account, following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        your storage account, following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -909,7 +909,7 @@ interactions:
         file to your Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022
         Delete the .exe from your storage account.\",\"\u2022 Limit access to your
         storage account, following the 'least privilege' principle. Consider using
-        identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview.\",\"\u2022
+        identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview.\",\"\u2022
         Rotate all storage account keys that may be compromised and ensure that your
         storage account keys are only shared with authorized users.\",\"\u2022 Ensure
         that storage account keys are stored in a secured location such as Azure Key
@@ -935,8 +935,8 @@ interactions:
         ALERT] Unusual deletion in a storage file share\",\"description\":\"THIS IS
         A SAMPLE ALERT: Someone has performed an unusual deletion in your Azure storage
         account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit access to
-        your storage account, following the 'least privilege' principle:  https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        your storage account, following the 'least privilege' principle:  https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -963,8 +963,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has performed an unusual data exploration operation
         in your Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022
         Limit access to your storage account, following the 'least privilege' principle:
-        \ https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        \ https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -991,8 +991,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has extracted an unusual number of files from your
         Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit
         access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1019,8 +1019,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has extracted an unusual amount of data from your
         Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit
         access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1046,8 +1046,8 @@ interactions:
         ALERT] Unusual application accessed a storage file share\",\"description\":\"THIS
         IS A SAMPLE ALERT: Someone has accessed your Azure storage account 'Sample-Storage'
         using an unexpected application.\",\"remediationSteps\":[\"\u2022 Limit access
-        to your storage account, following the 'least privilege' principle:  https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        to your storage account, following the 'least privilege' principle:  https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1073,8 +1073,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has performed an unusual access inspection in your
         Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit
         access to your storage account, following the 'least privilege' principle:
-        \ https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
+        \ https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview?toc=/azure/storage/files/toc.json.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1085,7 +1085,7 @@ interactions:
         account.\\r\\nPotential causes:\\r\\n\u2022 An attacker has performed reconnaissance
         for a future attack.\\r\\n\u2022 A legitimate user has performed maintenance
         on the storage account.\",\"investigation steps\":\"\u2022 Confirm whether
-        the access policy inspection was performed for a legitimate purpose: https://docs.microsoft.com/en-us/rest/api/storageservices/define-stored-access-policy.\\r\\n\u2022
+        the access policy inspection was performed for a legitimate purpose: https://learn.microsoft.com/en-us/rest/api/storageservices/define-stored-access-policy.\\r\\n\u2022
         Review the file share's access permissions to make sure they are expected.
         The permissions can be viewed and updated through the Azure Portal or Azure
         Storage Explorer.\\r\\n\u2022 View related storage activity using Storage
@@ -1129,8 +1129,8 @@ interactions:
         ALERT] Access from a suspicious IP to a storage blob container\",\"description\":\"THIS
         IS A SAMPLE ALERT: Someone has accessed your Azure storage account 'Sample-Storage'
         from a suspicious IP address.\",\"remediationSteps\":[\"\u2022 Limit access
-        to your storage account, following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        to your storage account, following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1160,8 +1160,8 @@ interactions:
         alert fields. In many cases, attackers might successfully access data after
         a series of failed attempts. It\u2019s therefore important to act on this
         alert.\",\"remediationSteps\":[\"\u2022 Limit access to your storage account,
-        following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1200,8 +1200,8 @@ interactions:
         of a directory or a file in your Azure storage account 'Sample-Storage'. This
         alert was triggered by an ADLS Gen2 transaction.\",\"remediationSteps\":[\"\u2022
         Limit access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Use Azure AD security groups: https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control#what-is-the-best-way-to-apply-acls.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Use Azure AD security groups: https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control#what-is-the-best-way-to-apply-acls.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage directory or file permissions are configured correctly.\",\"\u2022
@@ -1213,7 +1213,7 @@ interactions:
         An attacker has changed directory or file permissions to weaken its security.\\r\\n\u2022
         A legitimate user has changed directory or file permissions.\",\"investigation
         steps\":\"\u2022 Confirm whether the directory or file permissions change
-        was performed for a legitimate purpose: https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control#access-control-lists-on-files-and-directories.\\r\\n\u2022
+        was performed for a legitimate purpose: https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control#access-control-lists-on-files-and-directories.\\r\\n\u2022
         Review the directory's or file's access permissions to make sure they are
         expected.\\r\\n\u2022 View related storage activity using Storage Analytics
         Logging. See how to configure Storage Analytics logging and more information:
@@ -1344,7 +1344,7 @@ interactions:
         IS A SAMPLE ALERT: Someone has uploaded potential malware to your Azure storage
         account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Remove the malicious
         blob from your storage account.\",\"\u2022 Limit access to your storage account,
-        following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1369,8 +1369,8 @@ interactions:
         ALERT] Access from an unusual location to a storage blob container\",\"description\":\"THIS
         IS A SAMPLE ALERT: Someone has accessed your Azure storage account 'Sample-Storage'
         from an unusual location.\",\"remediationSteps\":[\"\u2022 Limit access to
-        your storage account, following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        your storage account, following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1395,8 +1395,8 @@ interactions:
         file to your Azure storage account 'Sample-Storage'. This alert was triggered
         by an ADLS Gen2 transaction.\",\"remediationSteps\":[\"\u2022 Delete the .exe
         from your storage account.\",\"\u2022 Limit access to your storage account,
-        following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1423,8 +1423,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has performed an unusual deletion in your Azure
         storage account 'Sample-Storage'. This alert was triggered by an ADLS Gen2
         transaction.\",\"remediationSteps\":[\"\u2022 Limit access to your storage
-        account, following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        account, following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1452,8 +1452,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has performed an unusual data exploration operation
         in your Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022
         Limit access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1479,8 +1479,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has extracted an unusual number of blobs from your
         Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit
         access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1506,8 +1506,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has extracted an unusual amount of data from your
         Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit
         access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1537,8 +1537,8 @@ interactions:
         Determine if the cloud service package has been deployed to your subscription,
         and if so, delete the corresponding service.\",\"\u2022 Delete the .cspkg
         from your storage account.\",\"\u2022 Limit access to your storage account,
-        following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1566,8 +1566,8 @@ interactions:
         ALERT] Unusual application accessed a storage blob container\",\"description\":\"THIS
         IS A SAMPLE ALERT: Someone has accessed your Azure storage account 'Sample-Storage'
         using an unexpected application.\",\"remediationSteps\":[\"\u2022 Limit access
-        to your storage account, following the 'least privilege' principle: https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        to your storage account, following the 'least privilege' principle: https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1622,8 +1622,8 @@ interactions:
         IS A SAMPLE ALERT: Someone has performed an unusual access inspection in your
         Azure storage account 'Sample-Storage'.\",\"remediationSteps\":[\"\u2022 Limit
         access to your storage account, following the 'least privilege' principle:
-        https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
-        Consider using identity-based authentication: https://docs.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
+        https://learn.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-privileged-access#pa-7-follow-just-enough-administration-least-privilege-principle.\",\"\u2022
+        Consider using identity-based authentication: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory.\",\"\u2022
         Revoke all storage access tokens that may be compromised and ensure that your
         access tokens are only shared with authorized users.\",\"\u2022 Ensure that
         storage access tokens are stored in a secured location such as Azure Key Vault.
@@ -1634,7 +1634,7 @@ interactions:
         account.\\r\\nPotential causes:\\r\\n\u2022 An attacker has performed reconnaissance
         for a future attack.\\r\\n\u2022 A legitimate user has performed maintenance
         on the storage account.\",\"investigation steps\":\"\u2022 Confirm whether
-        the access policy inspection was performed for a legitimate purpose: https://docs.microsoft.com/en-us/rest/api/storageservices/define-stored-access-policy.\\r\\n\u2022
+        the access policy inspection was performed for a legitimate purpose: https://learn.microsoft.com/en-us/rest/api/storageservices/define-stored-access-policy.\\r\\n\u2022
         Review the storage container's access permissions to make sure they are expected.
         The permissions can be viewed and updated through the Azure Portal or Azure
         Storage Explorer.\\r\\n\u2022 View related storage activity using Storage
@@ -1656,13 +1656,13 @@ interactions:
         storage container for quarantine, or delete it.\",\"It is advisable to enable
         \\\\\\\"soft delete\\\\\\\" before deleting malware, to support the ability
         to undo the deletion. Learn more about enabling soft delete on Azure storage:
-        https://docs.microsoft.com/azure/storage/blobs/soft-delete-blob-overview.\\\",\\\"If
+        https://learn.microsoft.com/azure/storage/blobs/soft-delete-blob-overview.\\\",\\\"If
         you have diagnostic logs enabled, query them to see if any other applications
         or users accessed this file. Trace their actions and contain the blast radius.\"],\"extendedProperties\":{\"resourceType\":\"Storage\",\"potential
         Causes\":\"1. Intentional upload of malware by a malicious actor (true positive)\\r\\n\\r\\n2.
         Unintentional upload of malware by a legitimate user (true positive)\\r\\n\\r\\n3.
         A false positive detection by Microsoft antimalware scanning. You can submit
-        a file for analysis if you suspect it may be a false positive: \\r\\n(https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/submission-guide)\",\"shA-256\":\"Sample-SHA\",\"investigation
+        a file for analysis if you suspect it may be a false positive: \\r\\n(https://learn.microsoft.com/en-us/windows/security/threat-protection/intelligence/submission-guide)\",\"shA-256\":\"Sample-SHA\",\"investigation
         Steps\":\"\u2022 Learn more about the malware type by reading the report on
         the identified malware in Microsoft Security Intelligence:\\r\\n(https ://www.microsoft.com/wdsi/threats/threat-search?query=DOS/EICAR_Test_File)\\r\\n\\r\\n\u2022
         If you have diagnostic logs enabled, go to them and query to see if any other
@@ -1670,7 +1670,7 @@ interactions:
         the blast radius.\\r\\n\\r\\n\u2022 Review the credentials used to perform
         the upload, to track back and find the user who uploaded the file.\\r\\n\\r\\n\u2022
         If you performed an investigation and suspect the this might be a false positive,
-        you can submit a file for analysis\\r\\n(https://docs.microsoft.com/windows/security/threat-protection/intelligence/submission-guide).\\r\\nEnsure
+        you can submit a file for analysis\\r\\n(https://learn.microsoft.com/windows/security/threat-protection/intelligence/submission-guide).\\r\\nEnsure
         you enter the provider name \\\"Defender for Storage\\\".\\r\\n\\r\\n\u2022
         Ensure that storage access tokens are stored in a secured location such as
         Azure Key Vault. Avoid storing or sharing storage access tokens in source
@@ -2207,7 +2207,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/19 08:43:11.7850829\",\"activity
         end time (UTC)\":\"2022/10/19 08:46:18.8210573\",\"attacker source IP\":\"IP
         Address: 80.66.88.210\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2228,7 +2228,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/19 08:34:16.9189969\",\"activity
         end time (UTC)\":\"2022/10/19 08:35:36.0841961\",\"attacker source IP\":\"IP
         Address: 87.251.64.140\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2249,7 +2249,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/18 07:01:04.8124138\",\"activity
         end time (UTC)\":\"2022/10/18 07:59:23.7067193\",\"attacker source IP\":\"IP
         Address: 80.66.88.129\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2271,7 +2271,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/17 03:00:40.7373365\",\"activity
         end time (UTC)\":\"2022/10/17 03:58:42.8075611\",\"attacker source IP\":\"IP
         Address: 20.216.185.188\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2292,7 +2292,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/16 02:31:21.2161162\",\"activity
         end time (UTC)\":\"2022/10/16 02:32:30.6331048\",\"attacker source IP\":\"IP
         Address: 80.66.88.215\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2313,7 +2313,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/15 01:00:15.0973756\",\"activity
         end time (UTC)\":\"2022/10/15 01:59:46.8790817\",\"attacker source IP\":\"IP
         Address: 91.240.118.113\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2334,7 +2334,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/13 22:00:01.4482685\",\"activity
         end time (UTC)\":\"2022/10/13 22:59:53.5475957\",\"attacker source IP\":\"IP
         Address: 191.96.168.246\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2355,7 +2355,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/12 07:03:03.4902548\",\"activity
         end time (UTC)\":\"2022/10/12 07:58:25.9885039\",\"attacker source IP\":\"IP
         Address: 20.127.38.151\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2376,7 +2376,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/11 06:24:25.9159134\",\"activity
         end time (UTC)\":\"2022/10/11 06:25:34.0915332\",\"attacker source IP\":\"IP
         Address: 80.66.88.209\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2398,7 +2398,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/11 06:01:14.9169493\",\"activity
         end time (UTC)\":\"2022/10/11 06:56:30.4976140\",\"attacker source IP\":\"IP
         Address: 20.127.38.151\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2419,7 +2419,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/10 04:39:37.8316652\",\"activity
         end time (UTC)\":\"2022/10/10 04:40:46.9760933\",\"attacker source IP\":\"IP
         Address: 80.66.88.203\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2440,7 +2440,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/08 23:01:26.3028246\",\"activity
         end time (UTC)\":\"2022/10/08 23:02:34.9154571\",\"attacker source IP\":\"IP
         Address: 80.66.88.204\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2476,7 +2476,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/07 11:04:11.9286049\",\"activity
         end time (UTC)\":\"2022/10/07 11:58:08.5153711\",\"attacker source IP\":\"IP
         Address: 36.95.205.132\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2497,7 +2497,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/06 04:23:26.0454432\",\"activity
         end time (UTC)\":\"2022/10/06 04:24:35.8466979\",\"attacker source IP\":\"IP
         Address: 80.66.88.202\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2518,7 +2518,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/05 02:50:46.5034967\",\"activity
         end time (UTC)\":\"2022/10/05 02:51:57.2848574\",\"attacker source IP\":\"IP
         Address: 80.66.88.211\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2539,7 +2539,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/03 21:02:04.4914110\",\"activity
         end time (UTC)\":\"2022/10/03 21:59:45.9038559\",\"attacker source IP\":\"IP
         Address: 91.240.118.113\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2560,7 +2560,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/02 20:00:01.9149954\",\"activity
         end time (UTC)\":\"2022/10/02 20:59:52.1082032\",\"attacker source IP\":\"IP
         Address: 20.111.37.32\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2581,7 +2581,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/10/01 19:00:03.9085601\",\"activity
         end time (UTC)\":\"2022/10/01 19:59:57.4159824\",\"attacker source IP\":\"IP
         Address: 20.111.37.32\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2603,7 +2603,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/30 18:00:04.3960635\",\"activity
         end time (UTC)\":\"2022/09/30 18:59:54.1716651\",\"attacker source IP\":\"IP
         Address: 20.111.37.32\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2625,7 +2625,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/29 17:00:02.5605584\",\"activity
         end time (UTC)\":\"2022/09/29 17:59:57.0286763\",\"attacker source IP\":\"IP
         Address: 20.111.37.32\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2647,7 +2647,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/28 16:00:05.5258206\",\"activity
         end time (UTC)\":\"2022/09/28 16:59:37.9920940\",\"attacker source IP\":\"IP
         Address: 20.25.4.51\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2668,7 +2668,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/28 16:00:00.9053856\",\"activity
         end time (UTC)\":\"2022/09/28 16:59:59.2397348\",\"attacker source IP\":\"IP
         Address: 194.26.29.113\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2690,7 +2690,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/27 15:00:34.6903888\",\"activity
         end time (UTC)\":\"2022/09/27 15:59:16.3833641\",\"attacker source IP\":\"IP
         Address: 20.216.185.188\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2711,7 +2711,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/26 14:19:33.6913949\",\"activity
         end time (UTC)\":\"2022/09/26 14:58:23.8234441\",\"attacker source IP\":\"IP
         Address: 20.245.85.81\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2732,7 +2732,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/25 12:00:01.1997686\",\"activity
         end time (UTC)\":\"2022/09/25 12:59:57.1598611\",\"attacker source IP\":\"IP
         Address: 195.78.54.97\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2753,7 +2753,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/24 11:00:18.5763676\",\"activity
         end time (UTC)\":\"2022/09/24 11:58:49.6929962\",\"attacker source IP\":\"IP
         Address: 181.30.28.175\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2774,7 +2774,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/23 10:00:00.8274366\",\"activity
         end time (UTC)\":\"2022/09/23 10:59:59.5074620\",\"attacker source IP\":\"IP
         Address: 195.78.54.97\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2795,7 +2795,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/22 04:00:04.6046565\",\"activity
         end time (UTC)\":\"2022/09/22 04:59:56.0312542\",\"attacker source IP\":\"IP
         Address: 195.78.54.97\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2816,7 +2816,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/21 01:09:51.5862915\",\"activity
         end time (UTC)\":\"2022/09/21 01:11:21.0264894\",\"attacker source IP\":\"IP
         Address: 87.251.64.140\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2837,7 +2837,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/19 23:45:22.3822188\",\"activity
         end time (UTC)\":\"2022/09/19 23:46:30.4248487\",\"attacker source IP\":\"IP
         Address: 80.66.88.210\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2858,7 +2858,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/19 23:33:59.3779873\",\"activity
         end time (UTC)\":\"2022/09/19 23:35:26.6505374\",\"attacker source IP\":\"IP
         Address: 87.251.64.140\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2879,7 +2879,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/18 15:25:13.0131394\",\"activity
         end time (UTC)\":\"2022/09/18 15:26:21.8162231\",\"attacker source IP\":\"IP
         Address: 80.66.88.214\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2900,7 +2900,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/18 15:11:42.6615962\",\"activity
         end time (UTC)\":\"2022/09/18 15:12:51.4574540\",\"attacker source IP\":\"IP
         Address: 80.66.88.207\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2921,7 +2921,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/17 06:16:10.2702205\",\"activity
         end time (UTC)\":\"2022/09/17 06:17:19.8910018\",\"attacker source IP\":\"IP
         Address: 80.66.88.210\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2942,7 +2942,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/17 06:14:58.8904498\",\"activity
         end time (UTC)\":\"2022/09/17 06:56:27.7122183\",\"attacker source IP\":\"IP
         Address: 80.66.88.203\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2963,7 +2963,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/16 05:08:11.5262962\",\"activity
         end time (UTC)\":\"2022/09/16 05:18:17.0502097\",\"attacker source IP\":\"IP
         Address: 194.26.29.11\",\"attacker source computer name\":\"Unknown\",\"number
@@ -2984,7 +2984,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/15 04:13:32.7545248\",\"activity
         end time (UTC)\":\"2022/09/15 04:44:44.3710273\",\"attacker source IP\":\"IP
         Address: 194.28.112.140\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3005,7 +3005,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/15 04:01:15.4479080\",\"activity
         end time (UTC)\":\"2022/09/15 04:59:18.4256783\",\"attacker source IP\":\"IP
         Address: 177.222.33.214\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3026,7 +3026,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/14 03:16:06.3695856\",\"activity
         end time (UTC)\":\"2022/09/14 03:28:53.2546631\",\"attacker source IP\":\"IP
         Address: 45.141.84.119\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3047,7 +3047,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/14 03:00:09.0721606\",\"activity
         end time (UTC)\":\"2022/09/14 03:58:48.0506045\",\"attacker source IP\":\"IP
         Address: 177.222.33.214\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3068,7 +3068,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/13 02:06:33.9661980\",\"activity
         end time (UTC)\":\"2022/09/13 02:59:16.2352367\",\"attacker source IP\":\"IP
         Address: 94.68.140.243\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3089,7 +3089,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/13 02:01:06.5351616\",\"activity
         end time (UTC)\":\"2022/09/13 02:59:02.3354809\",\"attacker source IP\":\"IP
         Address: 177.222.33.214\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3110,7 +3110,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/13 02:01:02.6571238\",\"activity
         end time (UTC)\":\"2022/09/13 02:58:26.9865062\",\"attacker source IP\":\"IP
         Address: 202.53.137.40\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3131,7 +3131,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/12 01:03:00.0345939\",\"activity
         end time (UTC)\":\"2022/09/12 01:58:17.2623523\",\"attacker source IP\":\"IP
         Address: 94.68.140.243\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3152,7 +3152,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/12 01:02:01.5569515\",\"activity
         end time (UTC)\":\"2022/09/12 01:59:42.6611129\",\"attacker source IP\":\"IP
         Address: 13.95.158.167\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3173,7 +3173,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/12 01:01:14.3047487\",\"activity
         end time (UTC)\":\"2022/09/12 01:58:35.5081690\",\"attacker source IP\":\"IP
         Address: 202.53.137.40\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3194,7 +3194,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/12 01:00:33.1405851\",\"activity
         end time (UTC)\":\"2022/09/12 01:59:46.8333262\",\"attacker source IP\":\"IP
         Address: 212.122.84.86\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3215,7 +3215,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/11 00:00:12.8945794\",\"activity
         end time (UTC)\":\"2022/09/11 00:58:59.5003110\",\"attacker source IP\":\"IP
         Address: 13.95.158.167\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3236,7 +3236,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/11 00:00:01.3462764\",\"activity
         end time (UTC)\":\"2022/09/11 00:59:39.8742720\",\"attacker source IP\":\"IP
         Address: 212.122.84.86\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3257,7 +3257,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/09 23:19:55.8595416\",\"activity
         end time (UTC)\":\"2022/09/09 23:21:04.4330469\",\"attacker source IP\":\"IP
         Address: 80.66.88.209\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3278,7 +3278,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/09 23:02:03.6672061\",\"activity
         end time (UTC)\":\"2022/09/09 23:59:12.4900011\",\"attacker source IP\":\"IP
         Address: 13.95.158.167\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3299,7 +3299,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/09 23:00:19.7258321\",\"activity
         end time (UTC)\":\"2022/09/09 23:59:49.9335078\",\"attacker source IP\":\"IP
         Address: 212.122.84.86\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3320,7 +3320,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/08 22:20:29.5893543\",\"activity
         end time (UTC)\":\"2022/09/08 22:29:58.4893361\",\"attacker source IP\":\"IP
         Address: 194.26.29.40\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3341,7 +3341,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/07 21:00:23.8352224\",\"activity
         end time (UTC)\":\"2022/09/07 21:58:54.9798418\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3362,7 +3362,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/06 20:03:04.4809494\",\"activity
         end time (UTC)\":\"2022/09/06 20:56:55.9879319\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3383,7 +3383,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/05 19:02:51.6994995\",\"activity
         end time (UTC)\":\"2022/09/05 19:58:21.2436919\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3404,7 +3404,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/04 18:15:18.1240752\",\"activity
         end time (UTC)\":\"2022/09/04 18:16:28.2863719\",\"attacker source IP\":\"IP
         Address: 80.66.88.210\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3426,7 +3426,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/04 18:03:27.5688076\",\"activity
         end time (UTC)\":\"2022/09/04 18:59:07.7762063\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3447,7 +3447,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/04 18:00:05.4957014\",\"activity
         end time (UTC)\":\"2022/09/04 18:59:55.0115416\",\"attacker source IP\":\"IP
         Address: 5.253.204.134\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3468,7 +3468,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/03 17:01:26.5171211\",\"activity
         end time (UTC)\":\"2022/09/03 17:59:43.2673099\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3489,7 +3489,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/02 16:00:11.6214787\",\"activity
         end time (UTC)\":\"2022/09/02 16:59:51.9962096\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3510,7 +3510,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/01 15:01:01.3410856\",\"activity
         end time (UTC)\":\"2022/09/01 15:59:56.7385647\",\"attacker source IP\":\"IP
         Address: 20.12.208.47\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3531,7 +3531,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/01 15:00:46.9534839\",\"activity
         end time (UTC)\":\"2022/09/01 15:59:59.8405470\",\"attacker source IP\":\"IP
         Address: 104.46.123.212\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3552,7 +3552,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/09/01 15:00:25.7943636\",\"activity
         end time (UTC)\":\"2022/09/01 15:57:07.2573856\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3573,7 +3573,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/08/31 14:04:17.6514064\",\"activity
         end time (UTC)\":\"2022/08/31 14:56:42.6476761\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
@@ -3594,7 +3594,7 @@ interactions:
         resources and services \",\"2. In case this is an Azure Virtual Machine, set
         up an NSG allow list of only expected IP addresses or ranges. (see https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/)\",\"3.
         In case this is an Azure Virtual Machine, lock down access to it using network
-        JIT (see https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
+        JIT (see https://learn.microsoft.com/en-us/azure/security-center/security-center-just-in-time)
         \"],\"extendedProperties\":{\"activity start time (UTC)\":\"2022/08/30 13:00:10.0241762\",\"activity
         end time (UTC)\":\"2022/08/30 13:55:29.9649978\",\"attacker source IP\":\"IP
         Address: 27.71.226.103\",\"attacker source computer name\":\"Unknown\",\"number
diff --git a/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_assessments.yaml b/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_assessments.yaml
index 3bf0e1f445b..11aa1b5153b 100644
--- a/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_assessments.yaml
+++ b/src/azure-cli/azure/cli/command_modules/security/tests/latest/recordings/test_security_assessments.yaml
@@ -730,10 +730,10 @@ interactions:
         protection should be installed on machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","description":"To
         protect machines from threats and vulnerabilities, install a supported endpoint
         protection solution.<br>Learn more about how endpoint protection for machines
-        is evaluated in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Endpoint
+        is evaluated in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Endpoint
         protection assessment and recommendations in Microsoft Defender for Cloud</a>.","remediationDescription":"To
         remediate missing endpoint protection:<br>1. Confirm that your solution is
-        on the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">list
+        on the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">list
         of tools supported by Defender for Cloud.</a><br>2. Install the supported
         endpoint protection solution or enable an existing tool.","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Low","threats":["ThreatResistance"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/9b26b102-ccde-4697-aa30-f0621f865f99","name":"9b26b102-ccde-4697-aa30-f0621f865f99","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Management
         ports of EC2 instances should be protected with just-in-time network access
@@ -1806,11 +1806,11 @@ interactions:
         Configure access\" and follow the instructions.","categories":["Container"],"severity":"High","publishDates":{"ga":"03/29/2022","public":"09/30/2021"},"tactics":["Defense
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["AWS"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/38307993-84fb-4636-8ce7-3a64466bb5cc","name":"38307993-84fb-4636-8ce7-3a64466bb5cc","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"EKS
         clusters should have Microsoft Defender''s extension for Azure Arc installed","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Microsoft
-        Defender''s <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
+        Defender''s <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
         extension</a> provides security capabilities for your EKS clusters. The extension
         collects data from a cluster and its nodes to identify security vulnerabilities
-        and threats. <br> The extension works with <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
-        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
+        and threats. <br> The extension works with <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"<ol><li>
         Review the recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run
         <code>kubectl config current-context</code> and verify you are working with
@@ -1826,7 +1826,7 @@ interactions:
         Containers needs permissions for your AWS account. These permissions will
         be used to enable Kubernetes control plane logging on your cluster and establish
         a reliable pipeline between your cluster and Defender for Cloud''s backend
-        in the cloud. <br> Learn more about <a href=\"https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction\">Microsoft
+        in the cloud. <br> Learn more about <a href=\"https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"To
         grant the required permissions: <br> <ol><li>From the Azure portal, open Microsoft
         Defender for Cloud.</li><li>2. Open the \"Environment settings\" page and
@@ -2268,8 +2268,8 @@ interactions:
         full visibility of the security content from Microsoft Defender for servers,
         EC2 instances should be connected to Azure Arc. To ensure that all eligible
         EC2 instances automatically receive Azure Arc, enable auto-provisioning from
-        Defender for Cloud at the AWS account level. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Cloud at the AWS account level. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a>.","remediationDescription":"1. From the Defender
         for Cloud, open \"Environment settings\".<br>2. For the relevant AWS account,
         select the three dots at the end of the row, and select \"Edit settings\".<br>3.
@@ -2280,8 +2280,8 @@ interactions:
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["AWS"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/231dee23-84db-44d2-bd9d-c32fbcfb42a3","name":"231dee23-84db-44d2-bd9d-c32fbcfb42a3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"EC2
         instances should be connected to Azure Arc","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Connect
         your EC2 instances to Azure Arc in order to have full visibility to Microsoft
-        Defender for Servers security content. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and about <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Servers security content. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and about <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a> on hybrid-cloud environment.","remediationDescription":"1.
         From the Azure portal, open \"Servers - Azure Arc\".<br>2. From the top left
         corner, select \"Add\".<br>3. From \"Add a single server\", select \"Generate
@@ -5664,11 +5664,11 @@ interactions:
         or datasets.patch methods","categories":["Data"],"severity":"Medium","publishDates":{"ga":"03/29/2022","public":"01/19/2022"},"tactics":["Impact"],"techniques":["Data
         Manipulation"],"cloudProviders":["GCP"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/0faf27b6-f1d5-4f50-b22a-5d129cba0113","name":"0faf27b6-f1d5-4f50-b22a-5d129cba0113","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"GKE
         clusters should have Microsoft Defender''s extension for Azure Arc installed","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Microsoft
-        Defender''s <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
+        Defender''s <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
         extension</a> provides security capabilities for your GKE clusters. The extension
         collects data from a cluster and its nodes to identify security vulnerabilities
-        and threats. <br> The extension works with <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
-        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
+        and threats. <br> The extension works with <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"<ol><li>
         Review the recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run
         <code>kubectl config current-context</code> and verify you are working with
@@ -5681,7 +5681,7 @@ interactions:
         v3, an admission controller webhook for <a target=\"_blank\" href=\"https://www.openpolicyagent.org/\">Open
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner. <br> The extension works with
-        <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
         Arc-enabled Kubernetes</a>.","remediationDescription":"<ol><li> Review the
         recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run <code>kubectl
         config current-context</code> and verify you are working with the correct
@@ -5691,8 +5691,8 @@ interactions:
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["GCP"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/9bbe2f0f-d6c6-48e8-b4d0-cf25d2c50206","name":"9bbe2f0f-d6c6-48e8-b4d0-cf25d2c50206","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"GCP
         VM instances should be connected to Azure Arc","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Connect
         your GCP Virtual Machines to Azure Arc in order to have full visibility to
-        Microsoft Defender for Servers security content. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/''>Azure
-        Arc</a>, and about <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Microsoft Defender for Servers security content. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/''>Azure
+        Arc</a>, and about <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a> on hybrid-cloud environment.","remediationDescription":"1.
         From the Azure portal, open \"Servers - Azure Arc\". 2. From the top left
         corner, select \"Add\". 3. From \"Add a single server\", select \"Generate
@@ -5711,8 +5711,8 @@ interactions:
         full visibility of the security content from Microsoft Defender for servers,
         GCP VM instances should be connected to Azure Arc. To ensure that all eligible
         VM instances automatically receive Azure Arc, enable auto-provisioning from
-        Defender for Cloud at the GCP project level. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Cloud at the GCP project level. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a>.","remediationDescription":"1. From the Defender
         for Cloud, open \"Environment settings\". 2. For the relevant GCP project,
         select the three dots at the end of the row, and select \"Edit settings\".
@@ -7397,22 +7397,22 @@ interactions:
         Analytics agent should be installed on virtual machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","description":"Defender
         for Cloud collects data from your Azure virtual machines (VMs) to monitor
         for security vulnerabilities and threats. Data is collected using the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
+        href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
         Analytics agent</a>, formerly known as the Microsoft Monitoring Agent (MMA),
         which reads various security-related configurations and event logs from the
         machine and copies the data to your Log Analytics workspace for analysis.
         This agent is also required if your VMs are used by an Azure managed service
         such as Azure Kubernetes Service or Azure Service Fabric. We recommend configuring
-        <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">auto-provisioning
+        <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">auto-provisioning
         </a> to automatically deploy the agent. If you choose not to use auto-provisioning,
         manually deploy the agent to your VMs using the instructions in the remediation
         steps.","remediationDescription":"For multiple ways to install and configure
-        your Log Analytics agent see the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent#installation-and-configuration\">following
+        your Log Analytics agent see the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent#installation-and-configuration\">following
         instructions</a>.","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/151e82c5-5341-a74b-1eb0-bc38d2c84bb5","name":"151e82c5-5341-a74b-1eb0-bc38d2c84bb5","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"MFA
         should be enabled on accounts with read permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         read privileges to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -7424,7 +7424,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -7435,7 +7435,7 @@ interactions:
         should be enabled on accounts with write permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         write privileges to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -7447,7 +7447,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -7458,7 +7458,7 @@ interactions:
         should be enabled on accounts with owner permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         owner permissions to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -7470,7 +7470,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -7599,7 +7599,7 @@ interactions:
         enabled, the protection status indicates that the resource is actively monitored.
         Even when Defender is enabled, multiple configuration settings should be validated
         on the agent, machine, workspace and SQL server to ensure active protection.","remediationDescription":"To
-        troubleshoot protection issues with <a href=''https://docs.microsoft.com/azure/defender-for-cloud/quickstart-enable-database-protections#enable-database-protection-on-your-subscription''>Microsoft
+        troubleshoot protection issues with <a href=''https://learn.microsoft.com/azure/defender-for-cloud/quickstart-enable-database-protections#enable-database-protection-on-your-subscription''>Microsoft
         Defender for Cloud</a>, verify that the agent is installed and connected to
         the enabled workspace (either default or custom workspace).<br>Also, verify
         from the workspace blade that the Defender solutions are installed. Inspect
@@ -7616,7 +7616,7 @@ interactions:
         Azure AD authentication enables simplified permission management and centralized
         identity management of database users and other Microsoft services.","remediationDescription":"To
         provision an Azure AD administrator for SQL server, see <a target=''blank''
-        href=''https://docs.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure''>Configure
+        href=''https://learn.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure''>Configure
         and manage Azure Active Directory authentication with SQL Database, Managed
         Instance, or SQL Data Warehouse</a>","categories":["Data"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Initial
         Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/12018f4f-3d10-999b-e4c4-86ec25be08a1","name":"12018f4f-3d10-999b-e4c4-86ec25be08a1","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
@@ -7628,18 +7628,18 @@ interactions:
         will be fully retired on March 1, 2023.<br><br>To view all affected classic
         VMs make sure to select all your Azure subscriptions under ''directories +
         subscriptions'' tab.<br><br>Available resources and information about this
-        tool & migration:<br><a href=''https://docs.microsoft.com/azure/virtual-machines/classic-vm-deprecation?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Overview
+        tool & migration:<br><a href=''https://learn.microsoft.com/azure/virtual-machines/classic-vm-deprecation?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Overview
         of Virtual machines (classic) deprecation, step by step process for migration
-        & available Microsoft resources.</a><br><a href=''https://docs.microsoft.com/azure/virtual-machines/migration-classic-resource-manager-deep-dive?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Details
-        about Migrate to Azure Resource Manager migration tool.</a><br><a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-ps''>Migrate
+        & available Microsoft resources.</a><br><a href=''https://learn.microsoft.com/azure/virtual-machines/migration-classic-resource-manager-deep-dive?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Details
+        about Migrate to Azure Resource Manager migration tool.</a><br><a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-ps''>Migrate
         to Azure Resource Manager migration tool using PowerShell.</a>","remediationDescription":"To
         migrate virtual machines to new ARM resources: <br>1. Go to the Virtual machines
         (classic) Portal Blade.<br>2. Under <b>Subscriptions</b>, select all available
         subscriptions to get full list of affected classic VMs.<br>3. Click on <b>Migrate
         to ARM.</b><br>4. Click on <b>Validate</b>. If validate failed, use the suggested
-        methods in the error messages or at <a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
+        methods in the error messages or at <a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
         Overview document</a> to fix the errors.<br>5. Click on <b>Prepare</b>. If
-        prepare failed, use the suggested methods in the error messages or at <a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
+        prepare failed, use the suggested methods in the error messages or at <a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
         Overview document</a> to fix the errors.<br>6. View migrated virtual machines
         at <b>Virtual Machines</b> Portal Blade and Test their operation.<br>7. (Optional)
         Click on <b>Abort</b> to rollback migration.<br>8. Click on <b>Commit</b>.
@@ -7732,7 +7732,7 @@ interactions:
         account variable assets, in the Azure CLI - run the following command: Set-AzAutomationVariable
         -AutomationAccountName ''{AutomationAccountName}'' -Encrypted $true -Name
         ''{VariableName}'' -ResourceGroupName ''{ResourceGroupName}'' -Value ''{Value}''
-        <br> Read more <a href=\"https://docs.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-1.4.0\">here</a>","categories":["Compute"],"severity":"High","userImpact":"High","implementationEffort":"High","threats":["DataExfiltration","DataSpillage","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
+        <br> Read more <a href=\"https://learn.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-1.4.0\">here</a>","categories":["Compute"],"severity":"High","userImpact":"High","implementationEffort":"High","threats":["DataExfiltration","DataSpillage","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ad5bbaeb-7632-5edf-f1c2-752075831ce8","name":"ad5bbaeb-7632-5edf-f1c2-752075831ce8","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Diagnostic
         logs in Azure Data Lake Store should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","description":"Enable
         logs and retain them for up to a year. This enables you to recreate activity
@@ -7755,7 +7755,7 @@ interactions:
         Fabric clusters should only use Azure Active Directory for client authentication","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","description":"Perform
         Client authentication only via Azure Active Directory in Service Fabric","remediationDescription":"To
         enable client authentication using Azure Active Directory follow the instructions
-        to <a target=''_blank'' href=''https://docs.microsoft.com/azure/service-fabric/service-fabric-cluster-creation-setup-aad''>Set
+        to <a target=''_blank'' href=''https://learn.microsoft.com/azure/service-fabric/service-fabric-cluster-creation-setup-aad''>Set
         up Azure Active Directory for client authentication</a>.","categories":["Compute"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/7f04fc0c-4a3d-5c7e-ce19-666cb871b510","name":"7f04fc0c-4a3d-5c7e-ce19-666cb871b510","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","description":"Service
@@ -7806,14 +7806,14 @@ interactions:
         logs and retain them for up to a year. This enables you to recreate activity
         trails for investigation purposes when a security incident occurs or your
         network is compromised.","remediationDescription":"To enable Virtual Machines
-        Scale Sets diagnostics follow the <a target=''_blank'' href=''https://docs.microsoft.com/cli/azure/vmss/diagnostics?view=azure-cli-latest''>instructions</a>","categories":["Compute"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"plannedDeprecationDate":"12/2022","cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/47bb383c-8e25-95f0-c2aa-437add1d87d3","name":"47bb383c-8e25-95f0-c2aa-437add1d87d3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Storage
+        Scale Sets diagnostics follow the <a target=''_blank'' href=''https://learn.microsoft.com/cli/azure/vmss/diagnostics?view=azure-cli-latest''>instructions</a>","categories":["Compute"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"plannedDeprecationDate":"12/2022","cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/47bb383c-8e25-95f0-c2aa-437add1d87d3","name":"47bb383c-8e25-95f0-c2aa-437add1d87d3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Storage
         accounts should be migrated to new Azure Resource Manager resources","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","description":"To
         benefit from new capabilities in Azure Resource Manager, you can migrate existing
         deployments from the Classic deployment model. Resource Manager enables security
         enhancements such as: stronger access control (RBAC), better auditing, ARM-based
         deployment and governance, access to managed identities, access to key vault
         for secrets, Azure AD-based authentication and support for tags and resource
-        groups for easier security management. <a target=''_blank'' href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview''>Learn
+        groups for easier security management. <a target=''_blank'' href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview''>Learn
         more</a>","remediationDescription":"To migrate storage accounts to new ARM
         resources : <br>1. Go to the Storage Account<br>2. Click on <b>Migrate to
         ARM</b> and follow the instructions.","categories":["Data"],"severity":"Low","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/88bbc99c-e5af-ddd7-6105-6150b2bfa519","name":"88bbc99c-e5af-ddd7-6105-6150b2bfa519","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Diagnostic
@@ -7836,7 +7836,7 @@ interactions:
         In your storage account, go to ''Firewalls and virtual networks''.<br>2. Under
         ''Allow access from'', choose ''Selected networks''.<br>3. Configure the relevant
         virtual networks and IP ranges that should be allowed to access your storage
-        account.<br>4. Configure <a target=''_blank'' href=''https://docs.microsoft.com/azure/storage/common/storage-network-security#exceptions''>\"Allow
+        account.<br>4. Configure <a target=''_blank'' href=''https://learn.microsoft.com/azure/storage/common/storage-network-security#exceptions''>\"Allow
         trusted Microsoft services to access your storage account\"</a>.","categories":["Networking"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -7863,7 +7863,7 @@ interactions:
         Analytics agent should be installed on virtual machine scale sets","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","description":"Defender
         for Cloud collects data from your Azure virtual machines (VMs) to monitor
         for security vulnerabilities and threats. Data is collected using the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
+        href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
         Analytics agent</a>, formerly known as the Microsoft Monitoring Agent (MMA),
         which reads various security-related configurations and event logs from the
         machine and copies the data to your workspace for analysis. You''ll also need
@@ -7874,10 +7874,10 @@ interactions:
         services such as Azure Kubernetes Service and Azure Service Fabric), follow
         the procedure in the remediation steps.","remediationDescription":"For information
         on how to add the Log Analytics agent as an extension to your virtual machine
-        scale set, see the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/service-fabric/service-fabric-diagnostics-oms-agent\">following
+        scale set, see the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/service-fabric/service-fabric-diagnostics-oms-agent\">following
         instructions</a>. For information on how to deploy the log analytics agent
         at scale on virtual machine scale set using Azure Policy please see the <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/azure-monitor/insights/vminsights-enable-at-scale-policy#policies-for-azure-virtual-machine-scale-sets\">following
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/azure-monitor/insights/vminsights-enable-at-scale-policy#policies-for-azure-virtual-machine-scale-sets\">following
         instructions</a>.","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["AccountBreach","DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/8941d121-f740-35f6-952c-6561d2b38d36","name":"8941d121-f740-35f6-952c-6561d2b38d36","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
         machine scale sets should be configured securely","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","description":"Remediate
         vulnerabilities in security configuration on your virtual machine scale sets
@@ -7890,7 +7890,7 @@ interactions:
         protection should be installed on virtual machine scale sets","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","description":"Install
         an endpoint protection solution on your virtual machines scale sets, to protect
         them from threats and vulnerabilities.","remediationDescription":"To install
-        an endpoint protection solution:<br>1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow
+        an endpoint protection solution:<br>1.  <a href=\"https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow
         the instructions in How do I turn on antimalware in my virtual machine scale
         set</a>","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Defense
         Evasion","Command and Control","Initial Access","Execution"],"techniques":["Obfuscated
@@ -7911,7 +7911,7 @@ interactions:
         more</a>.","remediationDescription":"1. Register your subscription to Guest
         Configuration resource provider. 2. Install the Guest Configuration extension
         on your machine. 3. Enable a system-assigned managed identity, if one doesn''t
-        exist. Learn more in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
+        exist. Learn more in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
         Guest Configuration</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/69133b6b-695a-43eb-a763-221e19556755","name":"69133b6b-695a-43eb-a763-221e19556755","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
         machines'' Guest Configuration extension should be deployed with system-assigned
         managed identity","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","description":"The
@@ -7922,7 +7922,7 @@ interactions:
         enable a system-assigned managed identity, deploy the ''Enable a system-assigned
         managed identity'' initiative: 1. Register the resource provider. 2. Deploy
         requirements for Azure virtual machines. Learn more about configuring the
-        Guest Configuration prerequisites in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
+        Guest Configuration prerequisites in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
         Guest Configuration</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/22489c48-27d1-4e40-9420-4303ad9cffef","name":"22489c48-27d1-4e40-9420-4303ad9cffef","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Windows
         Defender Exploit Guard should be enabled on machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","description":"Windows
@@ -7930,7 +7930,7 @@ interactions:
         Guard has four components that are designed to lock down devices against a
         wide variety of attack vectors and block behaviors commonly used in malware
         attacks while enabling enterprises to balance their security risk and productivity
-        requirements (Windows only).","remediationDescription":"1. <a href=''https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders''>Enable
+        requirements (Windows only).","remediationDescription":"1. <a href=''https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders''>Enable
         controlled folder access</a>.<br>2. Configure the following attack surface
         reduction rules: ''Block executable content from email client and webmail'',
         ''Block untrusted and unsigned processes that run from USB'', ''Block credential
@@ -7941,7 +7941,7 @@ interactions:
         from creating executable content'', ''Block Office communication application
         from creating child processes'', ''Block Win32 API calls from Office macros'',
         ''Block Adobe Reader from creating child processes'', ''Block Office applications
-        from injecting code into other processes''.<br>Learn more in <a href=''https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction''>Use
+        from injecting code into other processes''.<br>Learn more in <a href=''https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction''>Use
         attack surface reduction rules to prevent malware infection</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance","DataSpillage","DataExfiltration","AccountBreach"],"publishDates":{"public":"06/01/2021"},"tactics":["Execution","Credential
         Access","Defense Evasion","Privilege Escalation","Lateral Movement","Initial
         Access"],"techniques":["Exploitation for Client Execution","Exploitation for
@@ -7955,7 +7955,7 @@ interactions:
         install the monitoring agent on your Arc machine:<br>1. From the Azure Arc
         machine''s page, go to <b>Extensions</b> and select <b>Add</b>.<br>2. Follow
         the instructions to add the relevant extension.<br> You can also use ARM template
-        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://docs.microsoft.com/azure/virtual-machines/extensions/oms-windows''>Learn
+        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://learn.microsoft.com/azure/virtual-machines/extensions/oms-windows''>Learn
         more about Log Analytics agent for Windows.</a>","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/720a3e77-0b9a-4fa9-98b6-ddf0fd7e32c1","name":"720a3e77-0b9a-4fa9-98b6-ddf0fd7e32c1","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Log
         Analytics agent should be installed on Linux-based Azure Arc-enabled machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","description":"Defender
         for Cloud uses the Log Analytics agent (also known as OMS) to collect security
@@ -7964,7 +7964,7 @@ interactions:
         install the monitoring agent on your Arc machine:<br>1. From the Azure Arc
         machine''s page, go to <b>Extensions</b> and select <b>Add</b>.<br>2. Follow
         the instructions to add the relevant extension.<br> You can also use ARM template
-        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://docs.microsoft.com/azure/virtual-machines/extensions/oms-linux''>Learn
+        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://learn.microsoft.com/azure/virtual-machines/extensions/oms-linux''>Learn
         more about Log Analytics agent for Linux.</a>","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/fc84abc0-eee6-4758-8372-a7681965ca44","name":"fc84abc0-eee6-4758-8372-a7681965ca44","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Validity
         period of certificates stored in Azure Key Vault should not exceed 12 months","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","description":"Ensure
         your certificates do not have a validity period that exceeds 12 months.","remediationDescription":"To
@@ -8004,7 +8004,7 @@ interactions:
         enable Microsoft Defender for servers on the subscription, those machines
         won''t be able to take advantage of just-in-time VM access, adaptive application
         controls, and network detections for Azure resources.<br>Learn more in <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for servers</a>.","remediationDescription":"To enable
         Microsoft Defender for servers on the identified workspaces, select the workspaces
         and select <b>Remediate</b>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"08/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/e9c320f1-03a0-4d2b-9a37-84b3bdc2e281","name":"e9c320f1-03a0-4d2b-9a37-84b3bdc2e281","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
@@ -8015,7 +8015,7 @@ interactions:
         machines.<br>It''s not enough to enable this optional Azure Defender plan
         on a subscription: it must also be enabled on the workspace. Until you enable
         the plan on the workspace too, it won''t protect your SQL servers and you
-        won''t be charged for the plan. <br> Learn more in <a href=''https://docs.microsoft.com/en-us/azure/security-center/defender-for-sql-usage''>Enable
+        won''t be charged for the plan. <br> Learn more in <a href=''https://learn.microsoft.com/en-us/azure/security-center/defender-for-sql-usage''>Enable
         Azure Defender for SQL servers on machines</a>.","remediationDescription":"To
         enable Microsoft Defender for SQL on machines on the identified workspaces,
         select the workspaces and select <b>Remediate</b>.","categories":["Data"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"09/29/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/14acab4e-ad95-11ec-b909-0242ac120002","name":"14acab4e-ad95-11ec-b909-0242ac120002","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
@@ -8034,19 +8034,19 @@ interactions:
         (AAD): </u></li><br><ol><li>Map all the resources that currently access to
         the Azure Cosmos DB account with keys or access tokens.</li> <li>Create an
         Azure Active Directory (AAD) identity for each of these resources:</li><ol
-        type=\"a\"><li> For Azure resources, you can <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview\">create
-        a managed identity</a> . You may <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types\">choose
+        type=\"a\"><li> For Azure resources, you can <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview\">create
+        a managed identity</a> . You may <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types\">choose
         between system-assigned and user-assigned managed identities</a>.</li><li>For
-        non-Azure resources, <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal\">create
+        non-Azure resources, <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal\">create
         an AAD identity</a>. </li></ol><li> Grant each AAD identity the minimum permission
         it requires. When possible, we recommend you use one of the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">2
+        href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">2
         built-in role definitions</a>: Cosmos DB Built-in Data Reader or Cosmos DB
         Built-in Data Contributor. </li> <li>Validate that the new resource is functioning
         correctly. After new permissions are granted to identities, it may take a
         few hours until they propagate. When all resources are working correctly with
         the new identities, continue to the next step. </li></ol><br><a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">You
+        href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">You
         can read more about configuring role-based access control with Azure Active
         Directory for your Azure Cosmos DB account</a>. <br> <br> <li><u> Enforce
         RBAC as the only authentication method:</u> <br> You may choose one of the
@@ -8056,9 +8056,9 @@ interactions:
         = az cosmosdb show --name $cosmosdbname --resource-group $resourcegroup |
         ConvertFrom-Json</code><br><br><code>az resource update --ids $cosmosdb.id
         --set properties.disableLocalAuth=true --latest-include-preview</code></li>
-        <br> <li>Deploy these changes in your ARM template <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth\">to
+        <br> <li>Deploy these changes in your ARM template <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth\">to
         enforce RBAC as the only authentication method</a>.<br><br><a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource\">You
+        href=\"https://learn.microsoft.com/en-us/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource\">You
         can read more about using ARM templates on existing resources</a>.</li><br></ol>After
         these changes have been implemented, all access attempts that use primary/secondary
         key or access tokens authentication will be denied.<br></ol>","categories":["IdentityAndAccess"],"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"public":"06/01/2022"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/2482620f-f324-4add-af68-2e01e27485e9","name":"2482620f-f324-4add-af68-2e01e27485e9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Over-provisioned
@@ -8331,8 +8331,8 @@ interactions:
         configure Private Link for Azure Database for PostgreSQL:<br>1. Navigate to
         your Azure Database for PostgreSQL. 2. Select Private Endpoint Connections
         in the left-hand pane 3. Click on \"+Private Endpoint\" and follow the instructions
-        provided <a href=\"https://docs.microsoft.com/azure/postgresql/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/postgresql/howto-configure-privatelink-portal</a>.
+        provided <a href=\"https://learn.microsoft.com/azure/postgresql/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/postgresql/howto-configure-privatelink-portal</a>.
         <br>For more information, see: <a href=\"https://aka.ms/pgprivatelink\" target=\"_blank\">https://aka.ms/pgprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -8345,8 +8345,8 @@ interactions:
         configure Private Link for Azure Database for MariaDB:<br>1. Navigate to your
         Azure Database for MariaDB. 2. Select Private Endpoint Connections in the
         left-hand pane 3. Click on \"+Private Endpoint\" and follow the instructions
-        provided <a href=\"https://docs.microsoft.com/azure/mariadb/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/mariadb/howto-configure-privatelink-portal</a>.<br>For
+        provided <a href=\"https://learn.microsoft.com/azure/mariadb/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/mariadb/howto-configure-privatelink-portal</a>.<br>For
         more information, see: <a href=\"https://aka.ms/mariadbprivatelink\" target=\"_blank\">https://aka.ms/mariadbprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -8359,8 +8359,8 @@ interactions:
         configure Private Link for Azure Database for MySQL:<br>1. Navigate to your
         Azure Database for MySQL. 2. Select Private Endpoint Connections in the left-hand
         pane 3. Click on \"+Private Endpoint\" and follow the instructions provided
-        <a href=\"https://docs.microsoft.com/azure/mysql/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/mysql/howto-configure-privatelink-portal</a>.<br>For
+        <a href=\"https://learn.microsoft.com/azure/mysql/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/mysql/howto-configure-privatelink-portal</a>.<br>For
         more information, see: <a href=\"https://aka.ms/mysqlprivatelink\" target=\"_blank\">https://aka.ms/mysqlprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -8378,7 +8378,7 @@ interactions:
         for your Function app.<br>2. Select Configuration, and go to the General Settings
         tab.<br>3. Select the General Settings tab.<br>4. Under the FTP state section,
         select FTPS only.<br>For more information, visit here: <a href=\"https://aka.ms/deploy-ftp\"
-        target=\"_blank\">https://aka.ms/deploy-ftp</a><br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability\"
+        target=\"_blank\">https://aka.ms/deploy-ftp</a><br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability\"
         target=\"_blank\">Azure Functions Deployment Technology Availability</a>","categories":["AppServices"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access","Discovery"],"techniques":["Network Sniffing"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/19beaa2a-a126-b4dd-6d35-617f6cc83fca","name":"19beaa2a-a126-b4dd-6d35-617f6cc83fca","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"FTPS
         should be required in web apps","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","description":"Enable
@@ -8459,7 +8459,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Implementing Transparent Data Encryption (TDE) with
         your own key provides you with increased transparency and control over the
         TDE Protector, increased security with an HSM-backed external service, and
@@ -8469,7 +8469,7 @@ interactions:
         the SQL server. 2. On the Transparent data encryption page, select Customer-managed
         key. 3. For Key selection method, choose Select a key or Enter a key identifier
         if you have one. 4. If you chose Select a key, configure the desired Key vault
-        and Key. For more information, see this article:  https://docs.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6b51b7f7-cbed-75bf-8a02-43384bf47562","name":"6b51b7f7-cbed-75bf-8a02-43384bf47562","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"[Enable
+        and Key. For more information, see this article:  https://learn.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6b51b7f7-cbed-75bf-8a02-43384bf47562","name":"6b51b7f7-cbed-75bf-8a02-43384bf47562","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"[Enable
         if required] MySQL servers should use customer-managed keys to encrypt data
         at rest","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","description":"Recommendations
         to use customer-managed keys for encryption of data at rest are not assessed
@@ -8479,7 +8479,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your MySQL servers. By default, the data is encrypted at rest with
         service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -8503,7 +8503,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your PostgreSQL servers. By default, the data is encrypted at rest
         with service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -8539,7 +8539,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Implementing Transparent Data Encryption (TDE) with
         your own key provides increased transparency and control over the TDE Protector,
         increased security with an HSM-backed external service, and promotion of separation
@@ -8549,7 +8549,7 @@ interactions:
         the Transparent data encryption page, select Customer-managed key. 3. For
         Key selection method, choose Select a key or Enter a key identifier if you
         have one. 4. If you chose Select a key, configure the desired Key vault and
-        Key. For more information, see this article:  https://docs.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/be264018-593c-1162-bd5e-b74a39396652","name":"be264018-593c-1162-bd5e-b74a39396652","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
+        Key. For more information, see this article:  https://learn.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/be264018-593c-1162-bd5e-b74a39396652","name":"be264018-593c-1162-bd5e-b74a39396652","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
         Cache for Redis should reside within a virtual network","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","description":"Azure
         Virtual Network (VNet) deployment provides enhanced security and isolation
         for your Azure Cache for Redis, as well as subnets, access control policies,
@@ -8578,7 +8578,7 @@ interactions:
         settings</b> page, select the relevant subscription.<br>2. Open the <b>Auto
         provisioning</b> page and set the toggle to <b>On</b> for the Log Analytics
         agent.<br>3. Select the workspace to receive the data from the machines.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Configure
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Configure
         auto provisioning for agents and extensions from Microsoft Defender for Cloud</a>","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/77758c9d-8a56-5f54-6ff7-69a762ca6004","name":"77758c9d-8a56-5f54-6ff7-69a762ca6004","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Subscriptions
         should have a contact email address for security issues","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","description":"To
         ensure the relevant people in your organization are notified when there is
@@ -8597,7 +8597,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of the contents of your registries. By default, the data is encrypted
         at rest with service-managed keys, but customer-managed keys (CMK) are commonly
@@ -8703,7 +8703,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Customer-managed keys (CMK) are commonly required
         to meet regulatory compliance standards. CMKs enable the data stored in Cognitive
         Services to be encrypted with an Azure Key Vault key created and owned by
@@ -8736,7 +8736,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your Azure Cosmos DB. By default, the data is encrypted at rest
         with service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -8827,7 +8827,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Secure your storage account with greater flexibility
         using customer-managed keys (CMKs). When you specify a CMK, that key is used
         to protect and control access to the key that encrypts your data. Using CMKs
@@ -8873,7 +8873,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Manage encryption at rest of your Azure Machine
         Learning workspace data with customer-managed keys (CMK). By default, customer
         data is encrypted with service-managed keys, but CMKs are commonly required
@@ -8945,14 +8945,14 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed\">Detailed
+        key pair, also known as SSH keys. Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed\">Detailed
         steps: Create and manage SSH keys for authentication to a Linux VM in Azure</a>.","remediationDescription":"To
         use SSH for authentication to your Linux virtual machine: 1. Create an SSH
         key pair for the Linux virtual machine. 2. Disable password authentication
         in the Linux virtual machine''s configuration. 3. Update the SSH key in your
         Azure Resource Manager template (replace the admin password with the adminSSHKey
         parameter) or via the Azure CLI (with the --generate-ssh-keys command). Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-machines/linux/mac-create-ssh-keys\">Create
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-machines/linux/mac-create-ssh-keys\">Create
         and use an SSH public-private key pair for Linux VMs in Azure</a>.","categories":["Compute"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/75396512-3323-9be4-059d-32ecb113c3de","name":"75396512-3323-9be4-059d-32ecb113c3de","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","description":"Private
@@ -8961,7 +8961,7 @@ interactions:
         Connections: 1. Open Azure SQL Database and browse to the server blade 2.
         Navigate to Security --> Private endpoint connections blade via the navigation
         menu 3.  Select the \"+ Private Endpoint\" button 4. Follow the instructions
-        here: https://docs.microsoft.com/azure/azure-sql/database/private-endpoint-overview#how-to-set-up-private-link-for-azure-sql-database.","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
+        here: https://learn.microsoft.com/azure/azure-sql/database/private-endpoint-overview#how-to-set-up-private-link-for-azure-sql-database.","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
         Services"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/22e93e92-4a31-b4cd-d640-3ef908430aa6","name":"22e93e92-4a31-b4cd-d640-3ef908430aa6","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Public
@@ -8987,12 +8987,12 @@ interactions:
         protocol, Transport Layer Security (TLS). TLS secures communications over
         a network by using security certificates to encrypt a connection between machines.","remediationDescription":"To
         ensure your windows web server is using secure communication protocol: 1.
-        Enable Guest Configuration extension and system assigned identity: https://docs.microsoft.com/azure/virtual-machines/extensions/guest-configuration
+        Enable Guest Configuration extension and system assigned identity: https://learn.microsoft.com/azure/virtual-machines/extensions/guest-configuration
         2. Enable TLS on your machine. For Windows Server 2008 R2, Windows Server
         2012, or Windows 7, install the update at https://support.microsoft.com/help/3140245.
         For Windows 2012 R2 Server or later, no updates are necessary. 3. Update the
         Windows and WinHTTP registry keys (or verify that they''re correct) according
-        to the information here: https://docs.microsoft.com/dotnet/framework/network-programming/tls#configuring-schannel-protocols-in-the-windows-registry.","categories":["Compute"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f738efb8-005f-680d-3d43-b3db762d6243","name":"f738efb8-005f-680d-3d43-b3db762d6243","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Cognitive
+        to the information here: https://learn.microsoft.com/dotnet/framework/network-programming/tls#configuring-schannel-protocols-in-the-windows-registry.","categories":["Compute"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f738efb8-005f-680d-3d43-b3db762d6243","name":"f738efb8-005f-680d-3d43-b3db762d6243","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Cognitive
         Services accounts should restrict network access","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","description":"Network
         access to Cognitive Services accounts should be restricted. Configure network
         rules so only applications from allowed networks can access the Cognitive
@@ -9075,11 +9075,11 @@ interactions:
         enable Network Watcher: 1. Navigate to the Network Watcher page on the Azure
         portal 2. Select the relevant subscription and click on the region drop down
         3. For any regions that are listed as Disabled, enable them by selecting \"Enable
-        network watcher\" in the context menu For more information, visit here: https://docs.microsoft.com/azure/network-watcher/network-watcher-create","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f0fb2a7e-16d5-849f-be57-86db712e9bd0","name":"f0fb2a7e-16d5-849f-be57-86db712e9bd0","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
+        network watcher\" in the context menu For more information, visit here: https://learn.microsoft.com/azure/network-watcher/network-watcher-create","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f0fb2a7e-16d5-849f-be57-86db712e9bd0","name":"f0fb2a7e-16d5-849f-be57-86db712e9bd0","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
         Defender for Resource Manager should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","description":"Microsoft
         Defender for Resource Manager automatically monitors the resource management
         operations in your organization. Defender for Cloud detects threats and alerts
-        you about suspicious activity. Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-resource-manager-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        you about suspicious activity. Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-resource-manager-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Resource Manager</a>. Enabling this Defender plan
         results in charges. Learn about the pricing details per region on Defender
         for Cloud''s pricing page: https://azure.microsoft.com/services/defender-for-cloud/#pricing.","remediationDescription":"To
@@ -9095,7 +9095,7 @@ interactions:
         Defender for DNS provides an additional layer of protection for your cloud
         resources by continuously monitoring all DNS queries from your Azure resources.
         Defender for DNS alerts you about suspicious activity at the DNS layer. Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-dns-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-dns-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for DNS</a>. Enabling this Defender plan results in
         charges. Learn about the pricing details per region on Defender for Cloud''s
         pricing page: https://azure.microsoft.com/services/defender-for-cloud/#pricing.","remediationDescription":"To
@@ -11256,7 +11256,7 @@ interactions:
         attack surface.<br>This typically occurs when this IP address doesn''t communicate
         regularly with this resource. Alternatively, the IP address has been flagged
         as malicious by Defender for Cloud''s threat intelligence sources. Learn more
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/adaptive-network-hardening?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Improve
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/adaptive-network-hardening?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Improve
         your network security posture with adaptive network hardening</a>.","remediationDescription":"To
         review the recommended changes to the traffic rules for your network security
         groups, select a machine or select ''Take action''","categories":["Networking"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Lateral
@@ -11272,7 +11272,7 @@ interactions:
         for Cloud has identified some overly-permissive inbound rules for management
         ports in your Network Security Group. Enable just-in-time access control to
         protect your VM from internet-based brute-force attacks. Learn more in <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
         just-in-time (JIT) VM access</a>.","remediationDescription":"To enable just-in-time
         VM access:<br><ul><li>Select one or more VMs from the list below and select
         \"Remediate\", or select \"Take action\" if you''ve arrived from a recommendation
@@ -11295,7 +11295,7 @@ interactions:
         the rule by applying a less permissive range of source IP ranges.<br>4. Click
         ''Save''. <br>Use Defender for Cloud''s Just-in-time (JIT) virtual machine
         (VM) access to lock down inbound traffic to your Azure VMs by demand. Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
         just-in-time (JIT) VM access</a>.","categories":["Networking"],"severity":"Medium","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Initial
         Access"],"techniques":["External Remote Services"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/c3b51c94-588b-426b-a892-24696f9e54cc","name":"c3b51c94-588b-426b-a892-24696f9e54cc","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"IP
         forwarding on your virtual machine should be disabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","description":"Defender
@@ -11353,7 +11353,7 @@ interactions:
         In the Network interfaces page, select the ''Network security group'' menu
         item.<br>&emsp;&emsp;&emsp;&emsp;iii. Click ''Edit'' at the top of the page.<br>&emsp;&emsp;&emsp;&emsp;iv.
         Follow the on-screen instructions and select the Network Security Group to
-        assign to this NIC.<br><a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-network/security-overview\">Learn
+        assign to this NIC.<br><a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-network/security-overview\">Learn
         more</a>.","categories":["Networking"],"severity":"High","userImpact":"High","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Lateral
         Movement","Discovery","Exfiltration","Execution","Command and Control","Initial
         Access","Impact","Credential Access","Collection"],"techniques":["Remote Services","Network
@@ -11383,7 +11383,7 @@ interactions:
         In the Network interfaces page, select the ''Network security group'' menu
         item.<br>&emsp;&emsp;&emsp;&emsp;iii. Select ''Edit'' at the top of the page.<br>&emsp;&emsp;&emsp;&emsp;iv.
         Follow the on-screen instructions and select the network security group to
-        assign to this NIC.<br><a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-network/security-overview\">Learn
+        assign to this NIC.<br><a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-network/security-overview\">Learn
         more</a>.","categories":["Networking"],"severity":"Low","userImpact":"Low","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ffff0522-1e88-47fc-8382-2a80ba848f5d","name":"ffff0522-1e88-47fc-8382-2a80ba848f5d","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Machines
         should have a vulnerability assessment solution","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","description":"Defender
         for Cloud regularly checks your connected machines to ensure they''re running
@@ -11437,7 +11437,7 @@ interactions:
         subscription, you won''t be charged. If you later create key vaults on this
         subscription, they''ll automatically be protected and charges will begin.
         Learn about the <a target=\"_blank\" href=\"https://aka.ms/pricing-security-center\">pricing
-        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-key-vault-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-key-vault-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Key Vault</a>.","remediationDescription":"To enable
         Microsoft Defender for Key Vault on all key vaults in a subscription:<br>1.
         From Defender for Cloud''s <b>Environment settings</b> page, select the relevant
@@ -11454,7 +11454,7 @@ interactions:
         you won''t be charged. If you later create Azure SQL Database servers on this
         subscription, they''ll automatically be protected and charges will begin.
         Learn about the <a target=\"_blank\" href=\"https://aka.ms/pricing-security-center\">pricing
-        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for SQL</a>.","remediationDescription":"To enable this
         plan on all Azure SQL Database servers in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -11473,7 +11473,7 @@ interactions:
         SQL servers on machines. If you don''t have any SQL servers on machines in
         this subscription, no charges will be incurred.<br>If you create any SQL servers
         on machines on this subscription in the future, they will automatically be
-        protected and charges will begin at that time.<br> <a href=''https://docs.microsoft.com/azure/azure-sql/database/advanced-data-security''>Learn
+        protected and charges will begin at that time.<br> <a href=''https://learn.microsoft.com/azure/azure-sql/database/advanced-data-security''>Learn
         more about Microsoft Defender for SQL servers on machines.</a>","remediationDescription":"To
         enable this plan on all SQL servers on machines in a subscription:<br>1. From
         Defender for Cloud''s <b>Environment settings</b> page, select the relevant
@@ -11491,7 +11491,7 @@ interactions:
         later create Azure Storage accounts on this subscription, they''ll automatically
         be protected and charges will begin. Learn about the <a target=\"_blank\"
         href=\"https://aka.ms/pricing-security-center\">pricing details per region</a>.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-storage-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-storage-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Storage</a>.","remediationDescription":"To enable
         this plan on all Azure Storage accounts in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -11508,7 +11508,7 @@ interactions:
         Service plans in this subscription, no charges will be incurred.<br>If you
         create any App Service plans on this subscription in the future, they will
         automatically be protected and charges will begin at that time.<br>Learn more
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-app-service-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Protect
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-app-service-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Protect
         your web apps and APIs</a>.","remediationDescription":"To enable this plan
         on all App Service plans in a subscription:<br>1. From Defender for Cloud''s
         <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -11537,7 +11537,7 @@ interactions:
         have any Kubernetes clusters in this subscription, no charges will be incurred.<br>If
         you create any Kubernetes clusters on this subscription in the future, they
         will automatically be protected and charges will begin at that time.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/container-security?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/container-security?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Containers</a>.","remediationDescription":"To enable
         this plan on all Kubernetes clusters in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -11554,7 +11554,7 @@ interactions:
         servers. If you don''t have any servers in this subscription, no charges will
         be incurred.<br>If you create any servers on this subscription in the future,
         they will automatically be protected and charges will begin at that time.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for servers</a>.","remediationDescription":"To enable
         this plan on all servers in a subscription:<br>1. From Defender for Cloud''s
         <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -11580,7 +11580,7 @@ interactions:
         Defender for open-source relational databases should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","description":"Microsoft
         Defender for open-source relational databases detects anomalous activities
         indicating unusual and potentially harmful attempts to access or exploit databases.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-databases-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-databases-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for open-source relational databases</a>.<br><br>Important:
         Enabling this plan will result in charges for protecting your open-source
         relational databases. If you don''t have any open-source relational databases
@@ -11783,11 +11783,11 @@ interactions:
         protection health issues on machines should be resolved","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. See the documentation for the <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds#supported-endpoint-protection-solutions-?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds#supported-endpoint-protection-solutions-?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
         protection solutions supported by Defender for Cloud</a> and the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
+        href=\"https://learn.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
         protection assessments</a>.","remediationDescription":"<br>1. Confirm that
-        your solution is on the list of <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">tools
+        your solution is on the list of <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">tools
         supported by Defender for Cloud</a>. <br>2. For a list of possible health
         issues with your solution and advice on how to resolve the health issues,
         consult this page of the <a target=\"_blank\" href=\"https://aka.ms/endpoint-health-issues\">Defender
@@ -11802,7 +11802,7 @@ interactions:
         list. Otherwise, remove them.","categories":["Compute"],"preview":true,"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["ElevationOfPrivilege","MaliciousInsider"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c","name":"dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with read permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -11810,26 +11810,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">read
         permissions</a> on Azure resources.<br> More details and frequently asked
-        questions are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        questions are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -11846,7 +11846,7 @@ interactions:
         Access","Credential Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/c0cb17b2-0607-48a7-b0e0-903ed22de39b","name":"c0cb17b2-0607-48a7-b0e0-903ed22de39b","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with write permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/931e118d-50a1-4457-a5e4-78550e086c52","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -11854,26 +11854,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">write
         permissions</a> on Azure resources.<br>More details and frequently asked questions
-        are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -11890,7 +11890,7 @@ interactions:
         Access","Credential Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6240402e-f77c-46fa-9060-a7ce53997754","name":"6240402e-f77c-46fa-9060-a7ce53997754","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with owner permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3e008c3-56b9-4133-8fd7-d3347377402a","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -11898,26 +11898,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">owner
         permissions</a> on Azure resources.<br> More details and frequently asked
-        questions are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        questions are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -12029,9 +12029,9 @@ interactions:
         out of the recommendation by using the exemption workflow for any ports that
         need to remain open.<br>For all other findings, remediate per instructions
         below:<br> &bull; Need to secure network traffic for a single VNet, please
-        follow instruction to setup <a href=''https://docs.microsoft.com/azure/virtual-network/manage-network-security-group''>Network
+        follow instruction to setup <a href=''https://learn.microsoft.com/azure/virtual-network/manage-network-security-group''>Network
         Security Groups (NSG)</a>.<br> &bull; Need to secure network traffic for one
-        or more peered VNet, please follow instruction to setup <a href=''https://docs.microsoft.com/azure/firewall/tutorial-firewall-deploy-portal''>Azure
+        or more peered VNet, please follow instruction to setup <a href=''https://learn.microsoft.com/azure/firewall/tutorial-firewall-deploy-portal''>Azure
         Firewall</a>.<br>","categories":["Networking"],"preview":true,"severity":"High","userImpact":"High","implementationEffort":"Low","threats":["ThreatResistance"],"publishDates":{"public":"04/04/2022"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/41503391-efa5-47ee-9282-4eff6131462c","name":"41503391-efa5-47ee-9282-4eff6131462c","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Running
         container images should have vulnerability findings resolved","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0fc39691-5a3f-4e3e-94ee-2e6447309ad9","description":"Container
         image vulnerability assessment scans container images running on your Kubernetes
@@ -12063,12 +12063,12 @@ interactions:
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner.<p>Defender for Cloud requires
         the Add-on to audit and enforce security capabilities and compliance inside
-        your clusters. <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes\">
+        your clusters. <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes\">
         Learn more</a>.</p><p>Requires Kubernetes v1.14.0 or later.</p>","remediationDescription":"To
         configure the Azure Policy Add-on for use with your Azure Kubernetes Service
-        cluster, follow the instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-add-on-for-aks?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Install
+        cluster, follow the instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-add-on-for-aks?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Install
         Azure Policy Add-on for AKS</a>.<br><br><u>Auto provisioning:</u><br>You can
-        also auto deploy this add-on as explained in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection#enable-auto-provisioning-of-the-log-analytics-agent-and-extensions-\">Enable
+        also auto deploy this add-on as explained in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection#enable-auto-provisioning-of-the-log-analytics-agent-and-extensions-\">Enable
         auto provisioning of extensions</a>.<br>When auto provisioning for the add-on
         is set to <b>On</b>, the extension is enabled by default in all existing and
         future clusters (that meet the add-on installation requirements).","categories":["Container"],"severity":"High","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/0642d770-b189-42ef-a2ce-9dcc3ec6c169","name":"0642d770-b189-42ef-a2ce-9dcc3ec6c169","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
@@ -12078,10 +12078,10 @@ interactions:
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner.","remediationDescription":"To
         configure the Azure Policy extension for use with your Azure Arc-enabled Kubernetes
-        cluster, follow the instructions in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-extension-for-azure-arc-enabled-kubernetes''>#Install
+        cluster, follow the instructions in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-extension-for-azure-arc-enabled-kubernetes''>#Install
         Azure Policy Extension for Azure Arc-enabled Kubernetes</a>.<br><br><u>Auto
         provisioning:</u><br>You can also auto deploy this extension as explained
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#enable-auto-provisioning-of-extensions\">Enable
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#enable-auto-provisioning-of-extensions\">Enable
         auto provisioning of extensions</a> .<br>When auto provisioning for the extension
         is set to \"on\", the extension is enabled by default in all existing and
         future clusters (that meet the extension installation requirements).","categories":["Container"],"preview":true,"severity":"High","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2022","public":"06/01/2022"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/0adc5395-9169-4b9b-8687-af838d69410a"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/405c9ae6-49f9-46c4-8873-a86690f27818","name":"405c9ae6-49f9-46c4-8873-a86690f27818","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Container
@@ -12254,24 +12254,24 @@ interactions:
         ensure that only applications from allowed networks, machines, or subnets
         can access your cluster, restrict access to your Kubernetes API server. You
         can restrict access by defining authorized IP ranges, or by setting up your
-        API servers as private clusters as explained in<a target=\"_blank\" href=\"https://docs.microsoft.com/azure/aks/private-clusters\">Create
+        API servers as private clusters as explained in<a target=\"_blank\" href=\"https://learn.microsoft.com/azure/aks/private-clusters\">Create
         a private Azure Kubernetes Service cluster</a>.","remediationDescription":"To
         manually configure authorized IP ranges, follow the steps in <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/aks/api-server-authorized-ip-ranges?WT.mc_id=Portal-Microsoft_Azure_Security\">Secure
+        href=\"https://learn.microsoft.com/azure/aks/api-server-authorized-ip-ranges?WT.mc_id=Portal-Microsoft_Azure_Security\">Secure
         access to the API server using authorized IP address ranges in Azure Kubernetes
         Service (AKS)</a>. If your existing cluster uses a Basic SKU Load Balancer,
         you''ll need to redeploy or migrate to a new AKS cluster using the Standard
-        SKU Load Balancer as explained in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/aks/load-balancer-standard#moving-from-a-basic-sku-load-balancer-to-standard-sku\">Moving
+        SKU Load Balancer as explained in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/aks/load-balancer-standard#moving-from-a-basic-sku-load-balancer-to-standard-sku\">Moving
         from a basic SKU load balancer to standard SKU</a>. If you decide not to redeploy,
         and you want to move these clusters to the ''not applicable'' tab, follow
-        the steps in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/exempt-resource#define-an-exemption?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Define
+        the steps in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/exempt-resource#define-an-exemption?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Define
         an exemption</a>.","categories":["Container"],"severity":"High","userImpact":"High","implementationEffort":"Low","threats":["AccountBreach","DenialOfService"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Discovery"],"techniques":["Container
         and Resource Discovery"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/b0fdc63a-38e7-4bab-a7c4-2c2665abbaa9","name":"b0fdc63a-38e7-4bab-a7c4-2c2665abbaa9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Role-Based
         Access Control should be used on Kubernetes Services","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","description":"To
         provide granular filtering on the actions that users can perform, use Role-Based
         Access Control (RBAC) to manage permissions in Kubernetes Service Clusters
         and configure relevant authorization policies. For more information, see <a
-        target=''_blank'' href=''https://docs.microsoft.com/azure/aks/concepts-identity#role-based-access-controls-rbac''>Azure
+        target=''_blank'' href=''https://learn.microsoft.com/azure/aks/concepts-identity#role-based-access-controls-rbac''>Azure
         role-based access control</a>.","remediationDescription":"To Use Role-Based
         Access Control (RBAC) you must recreate your Kubernetes Service cluster and
         enable RBAC during the creation process. Creating a Kubernetes Service with
@@ -12296,20 +12296,20 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc-enabled Kubernetes
         clusters. The extension collects data from all control plane (master) nodes
         in the cluster and sends it to the Microsoft Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation.","remediationDescription":"To
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation.","remediationDescription":"To
         install the Defender extension on your Arc-enabled Kubernetes clusters, select
         an unhealthy cluster and select <b>Remediate</b>.<br>To manually deploy the
         extension with Azure Resource Manager, Azure CLI, or the REST API, see the
-        instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Microsoft
+        instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Microsoft
         Defender for Arc-enabled Kubernetes</a>.","categories":["Container"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/708b60a6-d253-4fe0-9114-4be4c00f012c"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/56a83a6e-c417-42ec-b567-1e6fcb3d09a9","name":"56a83a6e-c417-42ec-b567-1e6fcb3d09a9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
         Kubernetes Service clusters should have Defender profile enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","description":"Microsoft
         Defender for Containers provides cloud-native Kubernetes security capabilities
         including environment hardening, workload protection, and run-time protection.<br>
         When you enable the SecurityProfile.AzureDefender profile on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data.<br>Learn more about [Microsoft Defender for Containers](https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks#architecture-overview).","remediationDescription":"To
+        event data.<br>Learn more about [Microsoft Defender for Containers](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks#architecture-overview).","remediationDescription":"To
         enable the profile using Azure CLI, Azure Resource Manager, or the REST API,
-        follow the instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Enable
+        follow the instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Enable
         the SecurityProfile.AzureDefender profile</a>.","categories":["Data"],"severity":"High","publishDates":{"ga":"07/01/2022","public":"12/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/64def556-fbad-4622-930e-72d1d5589bf5"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ff87e0b4-17df-d338-5b19-80e71e0dcc9d","name":"ff87e0b4-17df-d338-5b19-80e71e0dcc9d","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Kubernetes
         clusters should not use the default namespace","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","description":"Prevent
         usage of the default namespace in Kubernetes clusters to protect against unauthorized
@@ -12570,10 +12570,10 @@ interactions:
         protection should be installed on machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","description":"To
         protect machines from threats and vulnerabilities, install a supported endpoint
         protection solution.<br>Learn more about how endpoint protection for machines
-        is evaluated in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Endpoint
+        is evaluated in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Endpoint
         protection assessment and recommendations in Microsoft Defender for Cloud</a>.","remediationDescription":"To
         remediate missing endpoint protection:<br>1. Confirm that your solution is
-        on the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">list
+        on the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">list
         of tools supported by Defender for Cloud.</a><br>2. Install the supported
         endpoint protection solution or enable an existing tool.","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Low","threats":["ThreatResistance"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/9b26b102-ccde-4697-aa30-f0621f865f99","name":"9b26b102-ccde-4697-aa30-f0621f865f99","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Management
         ports of EC2 instances should be protected with just-in-time network access
@@ -13646,11 +13646,11 @@ interactions:
         Configure access\" and follow the instructions.","categories":["Container"],"severity":"High","publishDates":{"ga":"03/29/2022","public":"09/30/2021"},"tactics":["Defense
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["AWS"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/38307993-84fb-4636-8ce7-3a64466bb5cc","name":"38307993-84fb-4636-8ce7-3a64466bb5cc","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"EKS
         clusters should have Microsoft Defender''s extension for Azure Arc installed","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Microsoft
-        Defender''s <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
+        Defender''s <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
         extension</a> provides security capabilities for your EKS clusters. The extension
         collects data from a cluster and its nodes to identify security vulnerabilities
-        and threats. <br> The extension works with <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
-        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
+        and threats. <br> The extension works with <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"<ol><li>
         Review the recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run
         <code>kubectl config current-context</code> and verify you are working with
@@ -13666,7 +13666,7 @@ interactions:
         Containers needs permissions for your AWS account. These permissions will
         be used to enable Kubernetes control plane logging on your cluster and establish
         a reliable pipeline between your cluster and Defender for Cloud''s backend
-        in the cloud. <br> Learn more about <a href=\"https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction\">Microsoft
+        in the cloud. <br> Learn more about <a href=\"https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"To
         grant the required permissions: <br> <ol><li>From the Azure portal, open Microsoft
         Defender for Cloud.</li><li>2. Open the \"Environment settings\" page and
@@ -14108,8 +14108,8 @@ interactions:
         full visibility of the security content from Microsoft Defender for servers,
         EC2 instances should be connected to Azure Arc. To ensure that all eligible
         EC2 instances automatically receive Azure Arc, enable auto-provisioning from
-        Defender for Cloud at the AWS account level. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Cloud at the AWS account level. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a>.","remediationDescription":"1. From the Defender
         for Cloud, open \"Environment settings\".<br>2. For the relevant AWS account,
         select the three dots at the end of the row, and select \"Edit settings\".<br>3.
@@ -14120,8 +14120,8 @@ interactions:
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["AWS"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/231dee23-84db-44d2-bd9d-c32fbcfb42a3","name":"231dee23-84db-44d2-bd9d-c32fbcfb42a3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"EC2
         instances should be connected to Azure Arc","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Connect
         your EC2 instances to Azure Arc in order to have full visibility to Microsoft
-        Defender for Servers security content. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and about <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Servers security content. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and about <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a> on hybrid-cloud environment.","remediationDescription":"1.
         From the Azure portal, open \"Servers - Azure Arc\".<br>2. From the top left
         corner, select \"Add\".<br>3. From \"Add a single server\", select \"Generate
@@ -17504,11 +17504,11 @@ interactions:
         or datasets.patch methods","categories":["Data"],"severity":"Medium","publishDates":{"ga":"03/29/2022","public":"01/19/2022"},"tactics":["Impact"],"techniques":["Data
         Manipulation"],"cloudProviders":["GCP"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/0faf27b6-f1d5-4f50-b22a-5d129cba0113","name":"0faf27b6-f1d5-4f50-b22a-5d129cba0113","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"GKE
         clusters should have Microsoft Defender''s extension for Azure Arc installed","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Microsoft
-        Defender''s <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
+        Defender''s <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
         extension</a> provides security capabilities for your GKE clusters. The extension
         collects data from a cluster and its nodes to identify security vulnerabilities
-        and threats. <br> The extension works with <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
-        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
+        and threats. <br> The extension works with <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"<ol><li>
         Review the recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run
         <code>kubectl config current-context</code> and verify you are working with
@@ -17521,7 +17521,7 @@ interactions:
         v3, an admission controller webhook for <a target=\"_blank\" href=\"https://www.openpolicyagent.org/\">Open
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner. <br> The extension works with
-        <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
         Arc-enabled Kubernetes</a>.","remediationDescription":"<ol><li> Review the
         recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run <code>kubectl
         config current-context</code> and verify you are working with the correct
@@ -17531,8 +17531,8 @@ interactions:
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["GCP"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/9bbe2f0f-d6c6-48e8-b4d0-cf25d2c50206","name":"9bbe2f0f-d6c6-48e8-b4d0-cf25d2c50206","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"GCP
         VM instances should be connected to Azure Arc","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Connect
         your GCP Virtual Machines to Azure Arc in order to have full visibility to
-        Microsoft Defender for Servers security content. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/''>Azure
-        Arc</a>, and about <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Microsoft Defender for Servers security content. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/''>Azure
+        Arc</a>, and about <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a> on hybrid-cloud environment.","remediationDescription":"1.
         From the Azure portal, open \"Servers - Azure Arc\". 2. From the top left
         corner, select \"Add\". 3. From \"Add a single server\", select \"Generate
@@ -17551,8 +17551,8 @@ interactions:
         full visibility of the security content from Microsoft Defender for servers,
         GCP VM instances should be connected to Azure Arc. To ensure that all eligible
         VM instances automatically receive Azure Arc, enable auto-provisioning from
-        Defender for Cloud at the GCP project level. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Cloud at the GCP project level. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a>.","remediationDescription":"1. From the Defender
         for Cloud, open \"Environment settings\". 2. For the relevant GCP project,
         select the three dots at the end of the row, and select \"Edit settings\".
@@ -19237,22 +19237,22 @@ interactions:
         Analytics agent should be installed on virtual machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","description":"Defender
         for Cloud collects data from your Azure virtual machines (VMs) to monitor
         for security vulnerabilities and threats. Data is collected using the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
+        href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
         Analytics agent</a>, formerly known as the Microsoft Monitoring Agent (MMA),
         which reads various security-related configurations and event logs from the
         machine and copies the data to your Log Analytics workspace for analysis.
         This agent is also required if your VMs are used by an Azure managed service
         such as Azure Kubernetes Service or Azure Service Fabric. We recommend configuring
-        <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">auto-provisioning
+        <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">auto-provisioning
         </a> to automatically deploy the agent. If you choose not to use auto-provisioning,
         manually deploy the agent to your VMs using the instructions in the remediation
         steps.","remediationDescription":"For multiple ways to install and configure
-        your Log Analytics agent see the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent#installation-and-configuration\">following
+        your Log Analytics agent see the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent#installation-and-configuration\">following
         instructions</a>.","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/151e82c5-5341-a74b-1eb0-bc38d2c84bb5","name":"151e82c5-5341-a74b-1eb0-bc38d2c84bb5","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"MFA
         should be enabled on accounts with read permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         read privileges to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -19264,7 +19264,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -19275,7 +19275,7 @@ interactions:
         should be enabled on accounts with write permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         write privileges to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -19287,7 +19287,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -19298,7 +19298,7 @@ interactions:
         should be enabled on accounts with owner permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         owner permissions to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -19310,7 +19310,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -19439,7 +19439,7 @@ interactions:
         enabled, the protection status indicates that the resource is actively monitored.
         Even when Defender is enabled, multiple configuration settings should be validated
         on the agent, machine, workspace and SQL server to ensure active protection.","remediationDescription":"To
-        troubleshoot protection issues with <a href=''https://docs.microsoft.com/azure/defender-for-cloud/quickstart-enable-database-protections#enable-database-protection-on-your-subscription''>Microsoft
+        troubleshoot protection issues with <a href=''https://learn.microsoft.com/azure/defender-for-cloud/quickstart-enable-database-protections#enable-database-protection-on-your-subscription''>Microsoft
         Defender for Cloud</a>, verify that the agent is installed and connected to
         the enabled workspace (either default or custom workspace).<br>Also, verify
         from the workspace blade that the Defender solutions are installed. Inspect
@@ -19456,7 +19456,7 @@ interactions:
         Azure AD authentication enables simplified permission management and centralized
         identity management of database users and other Microsoft services.","remediationDescription":"To
         provision an Azure AD administrator for SQL server, see <a target=''blank''
-        href=''https://docs.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure''>Configure
+        href=''https://learn.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure''>Configure
         and manage Azure Active Directory authentication with SQL Database, Managed
         Instance, or SQL Data Warehouse</a>","categories":["Data"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Initial
         Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/12018f4f-3d10-999b-e4c4-86ec25be08a1","name":"12018f4f-3d10-999b-e4c4-86ec25be08a1","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
@@ -19468,18 +19468,18 @@ interactions:
         will be fully retired on March 1, 2023.<br><br>To view all affected classic
         VMs make sure to select all your Azure subscriptions under ''directories +
         subscriptions'' tab.<br><br>Available resources and information about this
-        tool & migration:<br><a href=''https://docs.microsoft.com/azure/virtual-machines/classic-vm-deprecation?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Overview
+        tool & migration:<br><a href=''https://learn.microsoft.com/azure/virtual-machines/classic-vm-deprecation?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Overview
         of Virtual machines (classic) deprecation, step by step process for migration
-        & available Microsoft resources.</a><br><a href=''https://docs.microsoft.com/azure/virtual-machines/migration-classic-resource-manager-deep-dive?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Details
-        about Migrate to Azure Resource Manager migration tool.</a><br><a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-ps''>Migrate
+        & available Microsoft resources.</a><br><a href=''https://learn.microsoft.com/azure/virtual-machines/migration-classic-resource-manager-deep-dive?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Details
+        about Migrate to Azure Resource Manager migration tool.</a><br><a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-ps''>Migrate
         to Azure Resource Manager migration tool using PowerShell.</a>","remediationDescription":"To
         migrate virtual machines to new ARM resources: <br>1. Go to the Virtual machines
         (classic) Portal Blade.<br>2. Under <b>Subscriptions</b>, select all available
         subscriptions to get full list of affected classic VMs.<br>3. Click on <b>Migrate
         to ARM.</b><br>4. Click on <b>Validate</b>. If validate failed, use the suggested
-        methods in the error messages or at <a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
+        methods in the error messages or at <a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
         Overview document</a> to fix the errors.<br>5. Click on <b>Prepare</b>. If
-        prepare failed, use the suggested methods in the error messages or at <a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
+        prepare failed, use the suggested methods in the error messages or at <a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
         Overview document</a> to fix the errors.<br>6. View migrated virtual machines
         at <b>Virtual Machines</b> Portal Blade and Test their operation.<br>7. (Optional)
         Click on <b>Abort</b> to rollback migration.<br>8. Click on <b>Commit</b>.
@@ -19572,7 +19572,7 @@ interactions:
         account variable assets, in the Azure CLI - run the following command: Set-AzAutomationVariable
         -AutomationAccountName ''{AutomationAccountName}'' -Encrypted $true -Name
         ''{VariableName}'' -ResourceGroupName ''{ResourceGroupName}'' -Value ''{Value}''
-        <br> Read more <a href=\"https://docs.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-1.4.0\">here</a>","categories":["Compute"],"severity":"High","userImpact":"High","implementationEffort":"High","threats":["DataExfiltration","DataSpillage","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
+        <br> Read more <a href=\"https://learn.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-1.4.0\">here</a>","categories":["Compute"],"severity":"High","userImpact":"High","implementationEffort":"High","threats":["DataExfiltration","DataSpillage","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ad5bbaeb-7632-5edf-f1c2-752075831ce8","name":"ad5bbaeb-7632-5edf-f1c2-752075831ce8","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Diagnostic
         logs in Azure Data Lake Store should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","description":"Enable
         logs and retain them for up to a year. This enables you to recreate activity
@@ -19595,7 +19595,7 @@ interactions:
         Fabric clusters should only use Azure Active Directory for client authentication","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","description":"Perform
         Client authentication only via Azure Active Directory in Service Fabric","remediationDescription":"To
         enable client authentication using Azure Active Directory follow the instructions
-        to <a target=''_blank'' href=''https://docs.microsoft.com/azure/service-fabric/service-fabric-cluster-creation-setup-aad''>Set
+        to <a target=''_blank'' href=''https://learn.microsoft.com/azure/service-fabric/service-fabric-cluster-creation-setup-aad''>Set
         up Azure Active Directory for client authentication</a>.","categories":["Compute"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/7f04fc0c-4a3d-5c7e-ce19-666cb871b510","name":"7f04fc0c-4a3d-5c7e-ce19-666cb871b510","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","description":"Service
@@ -19646,14 +19646,14 @@ interactions:
         logs and retain them for up to a year. This enables you to recreate activity
         trails for investigation purposes when a security incident occurs or your
         network is compromised.","remediationDescription":"To enable Virtual Machines
-        Scale Sets diagnostics follow the <a target=''_blank'' href=''https://docs.microsoft.com/cli/azure/vmss/diagnostics?view=azure-cli-latest''>instructions</a>","categories":["Compute"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"plannedDeprecationDate":"12/2022","cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/47bb383c-8e25-95f0-c2aa-437add1d87d3","name":"47bb383c-8e25-95f0-c2aa-437add1d87d3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Storage
+        Scale Sets diagnostics follow the <a target=''_blank'' href=''https://learn.microsoft.com/cli/azure/vmss/diagnostics?view=azure-cli-latest''>instructions</a>","categories":["Compute"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"plannedDeprecationDate":"12/2022","cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/47bb383c-8e25-95f0-c2aa-437add1d87d3","name":"47bb383c-8e25-95f0-c2aa-437add1d87d3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Storage
         accounts should be migrated to new Azure Resource Manager resources","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","description":"To
         benefit from new capabilities in Azure Resource Manager, you can migrate existing
         deployments from the Classic deployment model. Resource Manager enables security
         enhancements such as: stronger access control (RBAC), better auditing, ARM-based
         deployment and governance, access to managed identities, access to key vault
         for secrets, Azure AD-based authentication and support for tags and resource
-        groups for easier security management. <a target=''_blank'' href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview''>Learn
+        groups for easier security management. <a target=''_blank'' href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview''>Learn
         more</a>","remediationDescription":"To migrate storage accounts to new ARM
         resources : <br>1. Go to the Storage Account<br>2. Click on <b>Migrate to
         ARM</b> and follow the instructions.","categories":["Data"],"severity":"Low","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/88bbc99c-e5af-ddd7-6105-6150b2bfa519","name":"88bbc99c-e5af-ddd7-6105-6150b2bfa519","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Diagnostic
@@ -19676,7 +19676,7 @@ interactions:
         In your storage account, go to ''Firewalls and virtual networks''.<br>2. Under
         ''Allow access from'', choose ''Selected networks''.<br>3. Configure the relevant
         virtual networks and IP ranges that should be allowed to access your storage
-        account.<br>4. Configure <a target=''_blank'' href=''https://docs.microsoft.com/azure/storage/common/storage-network-security#exceptions''>\"Allow
+        account.<br>4. Configure <a target=''_blank'' href=''https://learn.microsoft.com/azure/storage/common/storage-network-security#exceptions''>\"Allow
         trusted Microsoft services to access your storage account\"</a>.","categories":["Networking"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -19703,7 +19703,7 @@ interactions:
         Analytics agent should be installed on virtual machine scale sets","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","description":"Defender
         for Cloud collects data from your Azure virtual machines (VMs) to monitor
         for security vulnerabilities and threats. Data is collected using the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
+        href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
         Analytics agent</a>, formerly known as the Microsoft Monitoring Agent (MMA),
         which reads various security-related configurations and event logs from the
         machine and copies the data to your workspace for analysis. You''ll also need
@@ -19714,10 +19714,10 @@ interactions:
         services such as Azure Kubernetes Service and Azure Service Fabric), follow
         the procedure in the remediation steps.","remediationDescription":"For information
         on how to add the Log Analytics agent as an extension to your virtual machine
-        scale set, see the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/service-fabric/service-fabric-diagnostics-oms-agent\">following
+        scale set, see the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/service-fabric/service-fabric-diagnostics-oms-agent\">following
         instructions</a>. For information on how to deploy the log analytics agent
         at scale on virtual machine scale set using Azure Policy please see the <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/azure-monitor/insights/vminsights-enable-at-scale-policy#policies-for-azure-virtual-machine-scale-sets\">following
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/azure-monitor/insights/vminsights-enable-at-scale-policy#policies-for-azure-virtual-machine-scale-sets\">following
         instructions</a>.","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["AccountBreach","DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/8941d121-f740-35f6-952c-6561d2b38d36","name":"8941d121-f740-35f6-952c-6561d2b38d36","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
         machine scale sets should be configured securely","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","description":"Remediate
         vulnerabilities in security configuration on your virtual machine scale sets
@@ -19730,7 +19730,7 @@ interactions:
         protection should be installed on virtual machine scale sets","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","description":"Install
         an endpoint protection solution on your virtual machines scale sets, to protect
         them from threats and vulnerabilities.","remediationDescription":"To install
-        an endpoint protection solution:<br>1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow
+        an endpoint protection solution:<br>1.  <a href=\"https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow
         the instructions in How do I turn on antimalware in my virtual machine scale
         set</a>","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Defense
         Evasion","Command and Control","Initial Access","Execution"],"techniques":["Obfuscated
@@ -19751,7 +19751,7 @@ interactions:
         more</a>.","remediationDescription":"1. Register your subscription to Guest
         Configuration resource provider. 2. Install the Guest Configuration extension
         on your machine. 3. Enable a system-assigned managed identity, if one doesn''t
-        exist. Learn more in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
+        exist. Learn more in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
         Guest Configuration</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/69133b6b-695a-43eb-a763-221e19556755","name":"69133b6b-695a-43eb-a763-221e19556755","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
         machines'' Guest Configuration extension should be deployed with system-assigned
         managed identity","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","description":"The
@@ -19762,7 +19762,7 @@ interactions:
         enable a system-assigned managed identity, deploy the ''Enable a system-assigned
         managed identity'' initiative: 1. Register the resource provider. 2. Deploy
         requirements for Azure virtual machines. Learn more about configuring the
-        Guest Configuration prerequisites in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
+        Guest Configuration prerequisites in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
         Guest Configuration</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/22489c48-27d1-4e40-9420-4303ad9cffef","name":"22489c48-27d1-4e40-9420-4303ad9cffef","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Windows
         Defender Exploit Guard should be enabled on machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","description":"Windows
@@ -19770,7 +19770,7 @@ interactions:
         Guard has four components that are designed to lock down devices against a
         wide variety of attack vectors and block behaviors commonly used in malware
         attacks while enabling enterprises to balance their security risk and productivity
-        requirements (Windows only).","remediationDescription":"1. <a href=''https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders''>Enable
+        requirements (Windows only).","remediationDescription":"1. <a href=''https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders''>Enable
         controlled folder access</a>.<br>2. Configure the following attack surface
         reduction rules: ''Block executable content from email client and webmail'',
         ''Block untrusted and unsigned processes that run from USB'', ''Block credential
@@ -19781,7 +19781,7 @@ interactions:
         from creating executable content'', ''Block Office communication application
         from creating child processes'', ''Block Win32 API calls from Office macros'',
         ''Block Adobe Reader from creating child processes'', ''Block Office applications
-        from injecting code into other processes''.<br>Learn more in <a href=''https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction''>Use
+        from injecting code into other processes''.<br>Learn more in <a href=''https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction''>Use
         attack surface reduction rules to prevent malware infection</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance","DataSpillage","DataExfiltration","AccountBreach"],"publishDates":{"public":"06/01/2021"},"tactics":["Execution","Credential
         Access","Defense Evasion","Privilege Escalation","Lateral Movement","Initial
         Access"],"techniques":["Exploitation for Client Execution","Exploitation for
@@ -19795,7 +19795,7 @@ interactions:
         install the monitoring agent on your Arc machine:<br>1. From the Azure Arc
         machine''s page, go to <b>Extensions</b> and select <b>Add</b>.<br>2. Follow
         the instructions to add the relevant extension.<br> You can also use ARM template
-        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://docs.microsoft.com/azure/virtual-machines/extensions/oms-windows''>Learn
+        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://learn.microsoft.com/azure/virtual-machines/extensions/oms-windows''>Learn
         more about Log Analytics agent for Windows.</a>","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/720a3e77-0b9a-4fa9-98b6-ddf0fd7e32c1","name":"720a3e77-0b9a-4fa9-98b6-ddf0fd7e32c1","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Log
         Analytics agent should be installed on Linux-based Azure Arc-enabled machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","description":"Defender
         for Cloud uses the Log Analytics agent (also known as OMS) to collect security
@@ -19804,7 +19804,7 @@ interactions:
         install the monitoring agent on your Arc machine:<br>1. From the Azure Arc
         machine''s page, go to <b>Extensions</b> and select <b>Add</b>.<br>2. Follow
         the instructions to add the relevant extension.<br> You can also use ARM template
-        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://docs.microsoft.com/azure/virtual-machines/extensions/oms-linux''>Learn
+        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://learn.microsoft.com/azure/virtual-machines/extensions/oms-linux''>Learn
         more about Log Analytics agent for Linux.</a>","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/fc84abc0-eee6-4758-8372-a7681965ca44","name":"fc84abc0-eee6-4758-8372-a7681965ca44","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Validity
         period of certificates stored in Azure Key Vault should not exceed 12 months","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","description":"Ensure
         your certificates do not have a validity period that exceeds 12 months.","remediationDescription":"To
@@ -19844,7 +19844,7 @@ interactions:
         enable Microsoft Defender for servers on the subscription, those machines
         won''t be able to take advantage of just-in-time VM access, adaptive application
         controls, and network detections for Azure resources.<br>Learn more in <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for servers</a>.","remediationDescription":"To enable
         Microsoft Defender for servers on the identified workspaces, select the workspaces
         and select <b>Remediate</b>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"08/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/e9c320f1-03a0-4d2b-9a37-84b3bdc2e281","name":"e9c320f1-03a0-4d2b-9a37-84b3bdc2e281","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
@@ -19855,7 +19855,7 @@ interactions:
         machines.<br>It''s not enough to enable this optional Azure Defender plan
         on a subscription: it must also be enabled on the workspace. Until you enable
         the plan on the workspace too, it won''t protect your SQL servers and you
-        won''t be charged for the plan. <br> Learn more in <a href=''https://docs.microsoft.com/en-us/azure/security-center/defender-for-sql-usage''>Enable
+        won''t be charged for the plan. <br> Learn more in <a href=''https://learn.microsoft.com/en-us/azure/security-center/defender-for-sql-usage''>Enable
         Azure Defender for SQL servers on machines</a>.","remediationDescription":"To
         enable Microsoft Defender for SQL on machines on the identified workspaces,
         select the workspaces and select <b>Remediate</b>.","categories":["Data"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"09/29/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/14acab4e-ad95-11ec-b909-0242ac120002","name":"14acab4e-ad95-11ec-b909-0242ac120002","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
@@ -19874,19 +19874,19 @@ interactions:
         (AAD): </u></li><br><ol><li>Map all the resources that currently access to
         the Azure Cosmos DB account with keys or access tokens.</li> <li>Create an
         Azure Active Directory (AAD) identity for each of these resources:</li><ol
-        type=\"a\"><li> For Azure resources, you can <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview\">create
-        a managed identity</a> . You may <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types\">choose
+        type=\"a\"><li> For Azure resources, you can <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview\">create
+        a managed identity</a> . You may <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types\">choose
         between system-assigned and user-assigned managed identities</a>.</li><li>For
-        non-Azure resources, <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal\">create
+        non-Azure resources, <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal\">create
         an AAD identity</a>. </li></ol><li> Grant each AAD identity the minimum permission
         it requires. When possible, we recommend you use one of the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">2
+        href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">2
         built-in role definitions</a>: Cosmos DB Built-in Data Reader or Cosmos DB
         Built-in Data Contributor. </li> <li>Validate that the new resource is functioning
         correctly. After new permissions are granted to identities, it may take a
         few hours until they propagate. When all resources are working correctly with
         the new identities, continue to the next step. </li></ol><br><a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">You
+        href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">You
         can read more about configuring role-based access control with Azure Active
         Directory for your Azure Cosmos DB account</a>. <br> <br> <li><u> Enforce
         RBAC as the only authentication method:</u> <br> You may choose one of the
@@ -19896,9 +19896,9 @@ interactions:
         = az cosmosdb show --name $cosmosdbname --resource-group $resourcegroup |
         ConvertFrom-Json</code><br><br><code>az resource update --ids $cosmosdb.id
         --set properties.disableLocalAuth=true --latest-include-preview</code></li>
-        <br> <li>Deploy these changes in your ARM template <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth\">to
+        <br> <li>Deploy these changes in your ARM template <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth\">to
         enforce RBAC as the only authentication method</a>.<br><br><a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource\">You
+        href=\"https://learn.microsoft.com/en-us/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource\">You
         can read more about using ARM templates on existing resources</a>.</li><br></ol>After
         these changes have been implemented, all access attempts that use primary/secondary
         key or access tokens authentication will be denied.<br></ol>","categories":["IdentityAndAccess"],"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"public":"06/01/2022"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/2482620f-f324-4add-af68-2e01e27485e9","name":"2482620f-f324-4add-af68-2e01e27485e9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Over-provisioned
@@ -20171,8 +20171,8 @@ interactions:
         configure Private Link for Azure Database for PostgreSQL:<br>1. Navigate to
         your Azure Database for PostgreSQL. 2. Select Private Endpoint Connections
         in the left-hand pane 3. Click on \"+Private Endpoint\" and follow the instructions
-        provided <a href=\"https://docs.microsoft.com/azure/postgresql/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/postgresql/howto-configure-privatelink-portal</a>.
+        provided <a href=\"https://learn.microsoft.com/azure/postgresql/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/postgresql/howto-configure-privatelink-portal</a>.
         <br>For more information, see: <a href=\"https://aka.ms/pgprivatelink\" target=\"_blank\">https://aka.ms/pgprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -20185,8 +20185,8 @@ interactions:
         configure Private Link for Azure Database for MariaDB:<br>1. Navigate to your
         Azure Database for MariaDB. 2. Select Private Endpoint Connections in the
         left-hand pane 3. Click on \"+Private Endpoint\" and follow the instructions
-        provided <a href=\"https://docs.microsoft.com/azure/mariadb/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/mariadb/howto-configure-privatelink-portal</a>.<br>For
+        provided <a href=\"https://learn.microsoft.com/azure/mariadb/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/mariadb/howto-configure-privatelink-portal</a>.<br>For
         more information, see: <a href=\"https://aka.ms/mariadbprivatelink\" target=\"_blank\">https://aka.ms/mariadbprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -20199,8 +20199,8 @@ interactions:
         configure Private Link for Azure Database for MySQL:<br>1. Navigate to your
         Azure Database for MySQL. 2. Select Private Endpoint Connections in the left-hand
         pane 3. Click on \"+Private Endpoint\" and follow the instructions provided
-        <a href=\"https://docs.microsoft.com/azure/mysql/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/mysql/howto-configure-privatelink-portal</a>.<br>For
+        <a href=\"https://learn.microsoft.com/azure/mysql/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/mysql/howto-configure-privatelink-portal</a>.<br>For
         more information, see: <a href=\"https://aka.ms/mysqlprivatelink\" target=\"_blank\">https://aka.ms/mysqlprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -20218,7 +20218,7 @@ interactions:
         for your Function app.<br>2. Select Configuration, and go to the General Settings
         tab.<br>3. Select the General Settings tab.<br>4. Under the FTP state section,
         select FTPS only.<br>For more information, visit here: <a href=\"https://aka.ms/deploy-ftp\"
-        target=\"_blank\">https://aka.ms/deploy-ftp</a><br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability\"
+        target=\"_blank\">https://aka.ms/deploy-ftp</a><br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability\"
         target=\"_blank\">Azure Functions Deployment Technology Availability</a>","categories":["AppServices"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access","Discovery"],"techniques":["Network Sniffing"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/19beaa2a-a126-b4dd-6d35-617f6cc83fca","name":"19beaa2a-a126-b4dd-6d35-617f6cc83fca","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"FTPS
         should be required in web apps","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","description":"Enable
@@ -20299,7 +20299,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Implementing Transparent Data Encryption (TDE) with
         your own key provides you with increased transparency and control over the
         TDE Protector, increased security with an HSM-backed external service, and
@@ -20309,7 +20309,7 @@ interactions:
         the SQL server. 2. On the Transparent data encryption page, select Customer-managed
         key. 3. For Key selection method, choose Select a key or Enter a key identifier
         if you have one. 4. If you chose Select a key, configure the desired Key vault
-        and Key. For more information, see this article:  https://docs.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6b51b7f7-cbed-75bf-8a02-43384bf47562","name":"6b51b7f7-cbed-75bf-8a02-43384bf47562","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"[Enable
+        and Key. For more information, see this article:  https://learn.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6b51b7f7-cbed-75bf-8a02-43384bf47562","name":"6b51b7f7-cbed-75bf-8a02-43384bf47562","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"[Enable
         if required] MySQL servers should use customer-managed keys to encrypt data
         at rest","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","description":"Recommendations
         to use customer-managed keys for encryption of data at rest are not assessed
@@ -20319,7 +20319,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your MySQL servers. By default, the data is encrypted at rest with
         service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -20343,7 +20343,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your PostgreSQL servers. By default, the data is encrypted at rest
         with service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -20379,7 +20379,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Implementing Transparent Data Encryption (TDE) with
         your own key provides increased transparency and control over the TDE Protector,
         increased security with an HSM-backed external service, and promotion of separation
@@ -20389,7 +20389,7 @@ interactions:
         the Transparent data encryption page, select Customer-managed key. 3. For
         Key selection method, choose Select a key or Enter a key identifier if you
         have one. 4. If you chose Select a key, configure the desired Key vault and
-        Key. For more information, see this article:  https://docs.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/be264018-593c-1162-bd5e-b74a39396652","name":"be264018-593c-1162-bd5e-b74a39396652","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
+        Key. For more information, see this article:  https://learn.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/be264018-593c-1162-bd5e-b74a39396652","name":"be264018-593c-1162-bd5e-b74a39396652","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
         Cache for Redis should reside within a virtual network","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","description":"Azure
         Virtual Network (VNet) deployment provides enhanced security and isolation
         for your Azure Cache for Redis, as well as subnets, access control policies,
@@ -20418,7 +20418,7 @@ interactions:
         settings</b> page, select the relevant subscription.<br>2. Open the <b>Auto
         provisioning</b> page and set the toggle to <b>On</b> for the Log Analytics
         agent.<br>3. Select the workspace to receive the data from the machines.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Configure
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Configure
         auto provisioning for agents and extensions from Microsoft Defender for Cloud</a>","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/77758c9d-8a56-5f54-6ff7-69a762ca6004","name":"77758c9d-8a56-5f54-6ff7-69a762ca6004","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Subscriptions
         should have a contact email address for security issues","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","description":"To
         ensure the relevant people in your organization are notified when there is
@@ -20437,7 +20437,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of the contents of your registries. By default, the data is encrypted
         at rest with service-managed keys, but customer-managed keys (CMK) are commonly
@@ -20543,7 +20543,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Customer-managed keys (CMK) are commonly required
         to meet regulatory compliance standards. CMKs enable the data stored in Cognitive
         Services to be encrypted with an Azure Key Vault key created and owned by
@@ -20576,7 +20576,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your Azure Cosmos DB. By default, the data is encrypted at rest
         with service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -20667,7 +20667,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Secure your storage account with greater flexibility
         using customer-managed keys (CMKs). When you specify a CMK, that key is used
         to protect and control access to the key that encrypts your data. Using CMKs
@@ -20713,7 +20713,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Manage encryption at rest of your Azure Machine
         Learning workspace data with customer-managed keys (CMK). By default, customer
         data is encrypted with service-managed keys, but CMKs are commonly required
@@ -20785,14 +20785,14 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed\">Detailed
+        key pair, also known as SSH keys. Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed\">Detailed
         steps: Create and manage SSH keys for authentication to a Linux VM in Azure</a>.","remediationDescription":"To
         use SSH for authentication to your Linux virtual machine: 1. Create an SSH
         key pair for the Linux virtual machine. 2. Disable password authentication
         in the Linux virtual machine''s configuration. 3. Update the SSH key in your
         Azure Resource Manager template (replace the admin password with the adminSSHKey
         parameter) or via the Azure CLI (with the --generate-ssh-keys command). Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-machines/linux/mac-create-ssh-keys\">Create
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-machines/linux/mac-create-ssh-keys\">Create
         and use an SSH public-private key pair for Linux VMs in Azure</a>.","categories":["Compute"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/75396512-3323-9be4-059d-32ecb113c3de","name":"75396512-3323-9be4-059d-32ecb113c3de","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","description":"Private
@@ -20801,7 +20801,7 @@ interactions:
         Connections: 1. Open Azure SQL Database and browse to the server blade 2.
         Navigate to Security --> Private endpoint connections blade via the navigation
         menu 3.  Select the \"+ Private Endpoint\" button 4. Follow the instructions
-        here: https://docs.microsoft.com/azure/azure-sql/database/private-endpoint-overview#how-to-set-up-private-link-for-azure-sql-database.","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
+        here: https://learn.microsoft.com/azure/azure-sql/database/private-endpoint-overview#how-to-set-up-private-link-for-azure-sql-database.","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
         Services"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/22e93e92-4a31-b4cd-d640-3ef908430aa6","name":"22e93e92-4a31-b4cd-d640-3ef908430aa6","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Public
@@ -20827,12 +20827,12 @@ interactions:
         protocol, Transport Layer Security (TLS). TLS secures communications over
         a network by using security certificates to encrypt a connection between machines.","remediationDescription":"To
         ensure your windows web server is using secure communication protocol: 1.
-        Enable Guest Configuration extension and system assigned identity: https://docs.microsoft.com/azure/virtual-machines/extensions/guest-configuration
+        Enable Guest Configuration extension and system assigned identity: https://learn.microsoft.com/azure/virtual-machines/extensions/guest-configuration
         2. Enable TLS on your machine. For Windows Server 2008 R2, Windows Server
         2012, or Windows 7, install the update at https://support.microsoft.com/help/3140245.
         For Windows 2012 R2 Server or later, no updates are necessary. 3. Update the
         Windows and WinHTTP registry keys (or verify that they''re correct) according
-        to the information here: https://docs.microsoft.com/dotnet/framework/network-programming/tls#configuring-schannel-protocols-in-the-windows-registry.","categories":["Compute"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f738efb8-005f-680d-3d43-b3db762d6243","name":"f738efb8-005f-680d-3d43-b3db762d6243","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Cognitive
+        to the information here: https://learn.microsoft.com/dotnet/framework/network-programming/tls#configuring-schannel-protocols-in-the-windows-registry.","categories":["Compute"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f738efb8-005f-680d-3d43-b3db762d6243","name":"f738efb8-005f-680d-3d43-b3db762d6243","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Cognitive
         Services accounts should restrict network access","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","description":"Network
         access to Cognitive Services accounts should be restricted. Configure network
         rules so only applications from allowed networks can access the Cognitive
@@ -20915,11 +20915,11 @@ interactions:
         enable Network Watcher: 1. Navigate to the Network Watcher page on the Azure
         portal 2. Select the relevant subscription and click on the region drop down
         3. For any regions that are listed as Disabled, enable them by selecting \"Enable
-        network watcher\" in the context menu For more information, visit here: https://docs.microsoft.com/azure/network-watcher/network-watcher-create","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f0fb2a7e-16d5-849f-be57-86db712e9bd0","name":"f0fb2a7e-16d5-849f-be57-86db712e9bd0","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
+        network watcher\" in the context menu For more information, visit here: https://learn.microsoft.com/azure/network-watcher/network-watcher-create","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f0fb2a7e-16d5-849f-be57-86db712e9bd0","name":"f0fb2a7e-16d5-849f-be57-86db712e9bd0","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
         Defender for Resource Manager should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","description":"Microsoft
         Defender for Resource Manager automatically monitors the resource management
         operations in your organization. Defender for Cloud detects threats and alerts
-        you about suspicious activity. Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-resource-manager-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        you about suspicious activity. Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-resource-manager-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Resource Manager</a>. Enabling this Defender plan
         results in charges. Learn about the pricing details per region on Defender
         for Cloud''s pricing page: https://azure.microsoft.com/services/defender-for-cloud/#pricing.","remediationDescription":"To
@@ -20935,7 +20935,7 @@ interactions:
         Defender for DNS provides an additional layer of protection for your cloud
         resources by continuously monitoring all DNS queries from your Azure resources.
         Defender for DNS alerts you about suspicious activity at the DNS layer. Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-dns-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-dns-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for DNS</a>. Enabling this Defender plan results in
         charges. Learn about the pricing details per region on Defender for Cloud''s
         pricing page: https://azure.microsoft.com/services/defender-for-cloud/#pricing.","remediationDescription":"To
@@ -23096,7 +23096,7 @@ interactions:
         attack surface.<br>This typically occurs when this IP address doesn''t communicate
         regularly with this resource. Alternatively, the IP address has been flagged
         as malicious by Defender for Cloud''s threat intelligence sources. Learn more
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/adaptive-network-hardening?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Improve
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/adaptive-network-hardening?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Improve
         your network security posture with adaptive network hardening</a>.","remediationDescription":"To
         review the recommended changes to the traffic rules for your network security
         groups, select a machine or select ''Take action''","categories":["Networking"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Lateral
@@ -23112,7 +23112,7 @@ interactions:
         for Cloud has identified some overly-permissive inbound rules for management
         ports in your Network Security Group. Enable just-in-time access control to
         protect your VM from internet-based brute-force attacks. Learn more in <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
         just-in-time (JIT) VM access</a>.","remediationDescription":"To enable just-in-time
         VM access:<br><ul><li>Select one or more VMs from the list below and select
         \"Remediate\", or select \"Take action\" if you''ve arrived from a recommendation
@@ -23135,7 +23135,7 @@ interactions:
         the rule by applying a less permissive range of source IP ranges.<br>4. Click
         ''Save''. <br>Use Defender for Cloud''s Just-in-time (JIT) virtual machine
         (VM) access to lock down inbound traffic to your Azure VMs by demand. Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
         just-in-time (JIT) VM access</a>.","categories":["Networking"],"severity":"Medium","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Initial
         Access"],"techniques":["External Remote Services"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/c3b51c94-588b-426b-a892-24696f9e54cc","name":"c3b51c94-588b-426b-a892-24696f9e54cc","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"IP
         forwarding on your virtual machine should be disabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","description":"Defender
@@ -23193,7 +23193,7 @@ interactions:
         In the Network interfaces page, select the ''Network security group'' menu
         item.<br>&emsp;&emsp;&emsp;&emsp;iii. Click ''Edit'' at the top of the page.<br>&emsp;&emsp;&emsp;&emsp;iv.
         Follow the on-screen instructions and select the Network Security Group to
-        assign to this NIC.<br><a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-network/security-overview\">Learn
+        assign to this NIC.<br><a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-network/security-overview\">Learn
         more</a>.","categories":["Networking"],"severity":"High","userImpact":"High","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Lateral
         Movement","Discovery","Exfiltration","Execution","Command and Control","Initial
         Access","Impact","Credential Access","Collection"],"techniques":["Remote Services","Network
@@ -23223,7 +23223,7 @@ interactions:
         In the Network interfaces page, select the ''Network security group'' menu
         item.<br>&emsp;&emsp;&emsp;&emsp;iii. Select ''Edit'' at the top of the page.<br>&emsp;&emsp;&emsp;&emsp;iv.
         Follow the on-screen instructions and select the network security group to
-        assign to this NIC.<br><a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-network/security-overview\">Learn
+        assign to this NIC.<br><a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-network/security-overview\">Learn
         more</a>.","categories":["Networking"],"severity":"Low","userImpact":"Low","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ffff0522-1e88-47fc-8382-2a80ba848f5d","name":"ffff0522-1e88-47fc-8382-2a80ba848f5d","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Machines
         should have a vulnerability assessment solution","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","description":"Defender
         for Cloud regularly checks your connected machines to ensure they''re running
@@ -23277,7 +23277,7 @@ interactions:
         subscription, you won''t be charged. If you later create key vaults on this
         subscription, they''ll automatically be protected and charges will begin.
         Learn about the <a target=\"_blank\" href=\"https://aka.ms/pricing-security-center\">pricing
-        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-key-vault-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-key-vault-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Key Vault</a>.","remediationDescription":"To enable
         Microsoft Defender for Key Vault on all key vaults in a subscription:<br>1.
         From Defender for Cloud''s <b>Environment settings</b> page, select the relevant
@@ -23294,7 +23294,7 @@ interactions:
         you won''t be charged. If you later create Azure SQL Database servers on this
         subscription, they''ll automatically be protected and charges will begin.
         Learn about the <a target=\"_blank\" href=\"https://aka.ms/pricing-security-center\">pricing
-        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for SQL</a>.","remediationDescription":"To enable this
         plan on all Azure SQL Database servers in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -23313,7 +23313,7 @@ interactions:
         SQL servers on machines. If you don''t have any SQL servers on machines in
         this subscription, no charges will be incurred.<br>If you create any SQL servers
         on machines on this subscription in the future, they will automatically be
-        protected and charges will begin at that time.<br> <a href=''https://docs.microsoft.com/azure/azure-sql/database/advanced-data-security''>Learn
+        protected and charges will begin at that time.<br> <a href=''https://learn.microsoft.com/azure/azure-sql/database/advanced-data-security''>Learn
         more about Microsoft Defender for SQL servers on machines.</a>","remediationDescription":"To
         enable this plan on all SQL servers on machines in a subscription:<br>1. From
         Defender for Cloud''s <b>Environment settings</b> page, select the relevant
@@ -23331,7 +23331,7 @@ interactions:
         later create Azure Storage accounts on this subscription, they''ll automatically
         be protected and charges will begin. Learn about the <a target=\"_blank\"
         href=\"https://aka.ms/pricing-security-center\">pricing details per region</a>.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-storage-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-storage-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Storage</a>.","remediationDescription":"To enable
         this plan on all Azure Storage accounts in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -23348,7 +23348,7 @@ interactions:
         Service plans in this subscription, no charges will be incurred.<br>If you
         create any App Service plans on this subscription in the future, they will
         automatically be protected and charges will begin at that time.<br>Learn more
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-app-service-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Protect
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-app-service-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Protect
         your web apps and APIs</a>.","remediationDescription":"To enable this plan
         on all App Service plans in a subscription:<br>1. From Defender for Cloud''s
         <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -23377,7 +23377,7 @@ interactions:
         have any Kubernetes clusters in this subscription, no charges will be incurred.<br>If
         you create any Kubernetes clusters on this subscription in the future, they
         will automatically be protected and charges will begin at that time.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/container-security?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/container-security?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Containers</a>.","remediationDescription":"To enable
         this plan on all Kubernetes clusters in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -23394,7 +23394,7 @@ interactions:
         servers. If you don''t have any servers in this subscription, no charges will
         be incurred.<br>If you create any servers on this subscription in the future,
         they will automatically be protected and charges will begin at that time.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for servers</a>.","remediationDescription":"To enable
         this plan on all servers in a subscription:<br>1. From Defender for Cloud''s
         <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -23420,7 +23420,7 @@ interactions:
         Defender for open-source relational databases should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","description":"Microsoft
         Defender for open-source relational databases detects anomalous activities
         indicating unusual and potentially harmful attempts to access or exploit databases.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-databases-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-databases-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for open-source relational databases</a>.<br><br>Important:
         Enabling this plan will result in charges for protecting your open-source
         relational databases. If you don''t have any open-source relational databases
@@ -23623,11 +23623,11 @@ interactions:
         protection health issues on machines should be resolved","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. See the documentation for the <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds#supported-endpoint-protection-solutions-?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds#supported-endpoint-protection-solutions-?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
         protection solutions supported by Defender for Cloud</a> and the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
+        href=\"https://learn.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
         protection assessments</a>.","remediationDescription":"<br>1. Confirm that
-        your solution is on the list of <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">tools
+        your solution is on the list of <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">tools
         supported by Defender for Cloud</a>. <br>2. For a list of possible health
         issues with your solution and advice on how to resolve the health issues,
         consult this page of the <a target=\"_blank\" href=\"https://aka.ms/endpoint-health-issues\">Defender
@@ -23642,7 +23642,7 @@ interactions:
         list. Otherwise, remove them.","categories":["Compute"],"preview":true,"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["ElevationOfPrivilege","MaliciousInsider"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c","name":"dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with read permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -23650,26 +23650,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">read
         permissions</a> on Azure resources.<br> More details and frequently asked
-        questions are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        questions are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -23686,7 +23686,7 @@ interactions:
         Access","Credential Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/c0cb17b2-0607-48a7-b0e0-903ed22de39b","name":"c0cb17b2-0607-48a7-b0e0-903ed22de39b","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with write permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/931e118d-50a1-4457-a5e4-78550e086c52","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -23694,26 +23694,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">write
         permissions</a> on Azure resources.<br>More details and frequently asked questions
-        are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -23730,7 +23730,7 @@ interactions:
         Access","Credential Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6240402e-f77c-46fa-9060-a7ce53997754","name":"6240402e-f77c-46fa-9060-a7ce53997754","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with owner permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3e008c3-56b9-4133-8fd7-d3347377402a","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -23738,26 +23738,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">owner
         permissions</a> on Azure resources.<br> More details and frequently asked
-        questions are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        questions are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -23869,9 +23869,9 @@ interactions:
         out of the recommendation by using the exemption workflow for any ports that
         need to remain open.<br>For all other findings, remediate per instructions
         below:<br> &bull; Need to secure network traffic for a single VNet, please
-        follow instruction to setup <a href=''https://docs.microsoft.com/azure/virtual-network/manage-network-security-group''>Network
+        follow instruction to setup <a href=''https://learn.microsoft.com/azure/virtual-network/manage-network-security-group''>Network
         Security Groups (NSG)</a>.<br> &bull; Need to secure network traffic for one
-        or more peered VNet, please follow instruction to setup <a href=''https://docs.microsoft.com/azure/firewall/tutorial-firewall-deploy-portal''>Azure
+        or more peered VNet, please follow instruction to setup <a href=''https://learn.microsoft.com/azure/firewall/tutorial-firewall-deploy-portal''>Azure
         Firewall</a>.<br>","categories":["Networking"],"preview":true,"severity":"High","userImpact":"High","implementationEffort":"Low","threats":["ThreatResistance"],"publishDates":{"public":"04/04/2022"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/41503391-efa5-47ee-9282-4eff6131462c","name":"41503391-efa5-47ee-9282-4eff6131462c","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Running
         container images should have vulnerability findings resolved","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0fc39691-5a3f-4e3e-94ee-2e6447309ad9","description":"Container
         image vulnerability assessment scans container images running on your Kubernetes
@@ -23903,12 +23903,12 @@ interactions:
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner.<p>Defender for Cloud requires
         the Add-on to audit and enforce security capabilities and compliance inside
-        your clusters. <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes\">
+        your clusters. <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes\">
         Learn more</a>.</p><p>Requires Kubernetes v1.14.0 or later.</p>","remediationDescription":"To
         configure the Azure Policy Add-on for use with your Azure Kubernetes Service
-        cluster, follow the instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-add-on-for-aks?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Install
+        cluster, follow the instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-add-on-for-aks?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Install
         Azure Policy Add-on for AKS</a>.<br><br><u>Auto provisioning:</u><br>You can
-        also auto deploy this add-on as explained in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection#enable-auto-provisioning-of-the-log-analytics-agent-and-extensions-\">Enable
+        also auto deploy this add-on as explained in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection#enable-auto-provisioning-of-the-log-analytics-agent-and-extensions-\">Enable
         auto provisioning of extensions</a>.<br>When auto provisioning for the add-on
         is set to <b>On</b>, the extension is enabled by default in all existing and
         future clusters (that meet the add-on installation requirements).","categories":["Container"],"severity":"High","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/0642d770-b189-42ef-a2ce-9dcc3ec6c169","name":"0642d770-b189-42ef-a2ce-9dcc3ec6c169","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
@@ -23918,10 +23918,10 @@ interactions:
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner.","remediationDescription":"To
         configure the Azure Policy extension for use with your Azure Arc-enabled Kubernetes
-        cluster, follow the instructions in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-extension-for-azure-arc-enabled-kubernetes''>#Install
+        cluster, follow the instructions in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-extension-for-azure-arc-enabled-kubernetes''>#Install
         Azure Policy Extension for Azure Arc-enabled Kubernetes</a>.<br><br><u>Auto
         provisioning:</u><br>You can also auto deploy this extension as explained
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#enable-auto-provisioning-of-extensions\">Enable
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#enable-auto-provisioning-of-extensions\">Enable
         auto provisioning of extensions</a> .<br>When auto provisioning for the extension
         is set to \"on\", the extension is enabled by default in all existing and
         future clusters (that meet the extension installation requirements).","categories":["Container"],"preview":true,"severity":"High","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2022","public":"06/01/2022"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/0adc5395-9169-4b9b-8687-af838d69410a"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/405c9ae6-49f9-46c4-8873-a86690f27818","name":"405c9ae6-49f9-46c4-8873-a86690f27818","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Container
@@ -24094,24 +24094,24 @@ interactions:
         ensure that only applications from allowed networks, machines, or subnets
         can access your cluster, restrict access to your Kubernetes API server. You
         can restrict access by defining authorized IP ranges, or by setting up your
-        API servers as private clusters as explained in<a target=\"_blank\" href=\"https://docs.microsoft.com/azure/aks/private-clusters\">Create
+        API servers as private clusters as explained in<a target=\"_blank\" href=\"https://learn.microsoft.com/azure/aks/private-clusters\">Create
         a private Azure Kubernetes Service cluster</a>.","remediationDescription":"To
         manually configure authorized IP ranges, follow the steps in <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/aks/api-server-authorized-ip-ranges?WT.mc_id=Portal-Microsoft_Azure_Security\">Secure
+        href=\"https://learn.microsoft.com/azure/aks/api-server-authorized-ip-ranges?WT.mc_id=Portal-Microsoft_Azure_Security\">Secure
         access to the API server using authorized IP address ranges in Azure Kubernetes
         Service (AKS)</a>. If your existing cluster uses a Basic SKU Load Balancer,
         you''ll need to redeploy or migrate to a new AKS cluster using the Standard
-        SKU Load Balancer as explained in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/aks/load-balancer-standard#moving-from-a-basic-sku-load-balancer-to-standard-sku\">Moving
+        SKU Load Balancer as explained in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/aks/load-balancer-standard#moving-from-a-basic-sku-load-balancer-to-standard-sku\">Moving
         from a basic SKU load balancer to standard SKU</a>. If you decide not to redeploy,
         and you want to move these clusters to the ''not applicable'' tab, follow
-        the steps in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/exempt-resource#define-an-exemption?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Define
+        the steps in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/exempt-resource#define-an-exemption?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Define
         an exemption</a>.","categories":["Container"],"severity":"High","userImpact":"High","implementationEffort":"Low","threats":["AccountBreach","DenialOfService"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Discovery"],"techniques":["Container
         and Resource Discovery"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/b0fdc63a-38e7-4bab-a7c4-2c2665abbaa9","name":"b0fdc63a-38e7-4bab-a7c4-2c2665abbaa9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Role-Based
         Access Control should be used on Kubernetes Services","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","description":"To
         provide granular filtering on the actions that users can perform, use Role-Based
         Access Control (RBAC) to manage permissions in Kubernetes Service Clusters
         and configure relevant authorization policies. For more information, see <a
-        target=''_blank'' href=''https://docs.microsoft.com/azure/aks/concepts-identity#role-based-access-controls-rbac''>Azure
+        target=''_blank'' href=''https://learn.microsoft.com/azure/aks/concepts-identity#role-based-access-controls-rbac''>Azure
         role-based access control</a>.","remediationDescription":"To Use Role-Based
         Access Control (RBAC) you must recreate your Kubernetes Service cluster and
         enable RBAC during the creation process. Creating a Kubernetes Service with
@@ -24136,20 +24136,20 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc-enabled Kubernetes
         clusters. The extension collects data from all control plane (master) nodes
         in the cluster and sends it to the Microsoft Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation.","remediationDescription":"To
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation.","remediationDescription":"To
         install the Defender extension on your Arc-enabled Kubernetes clusters, select
         an unhealthy cluster and select <b>Remediate</b>.<br>To manually deploy the
         extension with Azure Resource Manager, Azure CLI, or the REST API, see the
-        instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Microsoft
+        instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Microsoft
         Defender for Arc-enabled Kubernetes</a>.","categories":["Container"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/708b60a6-d253-4fe0-9114-4be4c00f012c"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/56a83a6e-c417-42ec-b567-1e6fcb3d09a9","name":"56a83a6e-c417-42ec-b567-1e6fcb3d09a9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
         Kubernetes Service clusters should have Defender profile enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","description":"Microsoft
         Defender for Containers provides cloud-native Kubernetes security capabilities
         including environment hardening, workload protection, and run-time protection.<br>
         When you enable the SecurityProfile.AzureDefender profile on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data.<br>Learn more about [Microsoft Defender for Containers](https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks#architecture-overview).","remediationDescription":"To
+        event data.<br>Learn more about [Microsoft Defender for Containers](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks#architecture-overview).","remediationDescription":"To
         enable the profile using Azure CLI, Azure Resource Manager, or the REST API,
-        follow the instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Enable
+        follow the instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Enable
         the SecurityProfile.AzureDefender profile</a>.","categories":["Data"],"severity":"High","publishDates":{"ga":"07/01/2022","public":"12/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/64def556-fbad-4622-930e-72d1d5589bf5"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ff87e0b4-17df-d338-5b19-80e71e0dcc9d","name":"ff87e0b4-17df-d338-5b19-80e71e0dcc9d","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Kubernetes
         clusters should not use the default namespace","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","description":"Prevent
         usage of the default namespace in Kubernetes clusters to protect against unauthorized
@@ -25164,10 +25164,10 @@ interactions:
         protection should be installed on machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/1f7c564c-0a90-4d44-b7e1-9d456cffaee8","description":"To
         protect machines from threats and vulnerabilities, install a supported endpoint
         protection solution.<br>Learn more about how endpoint protection for machines
-        is evaluated in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Endpoint
+        is evaluated in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Endpoint
         protection assessment and recommendations in Microsoft Defender for Cloud</a>.","remediationDescription":"To
         remediate missing endpoint protection:<br>1. Confirm that your solution is
-        on the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">list
+        on the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">list
         of tools supported by Defender for Cloud.</a><br>2. Install the supported
         endpoint protection solution or enable an existing tool.","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Low","threats":["ThreatResistance"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/9b26b102-ccde-4697-aa30-f0621f865f99","name":"9b26b102-ccde-4697-aa30-f0621f865f99","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Management
         ports of EC2 instances should be protected with just-in-time network access
@@ -26240,11 +26240,11 @@ interactions:
         Configure access\" and follow the instructions.","categories":["Container"],"severity":"High","publishDates":{"ga":"03/29/2022","public":"09/30/2021"},"tactics":["Defense
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["AWS"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/38307993-84fb-4636-8ce7-3a64466bb5cc","name":"38307993-84fb-4636-8ce7-3a64466bb5cc","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"EKS
         clusters should have Microsoft Defender''s extension for Azure Arc installed","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Microsoft
-        Defender''s <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
+        Defender''s <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
         extension</a> provides security capabilities for your EKS clusters. The extension
         collects data from a cluster and its nodes to identify security vulnerabilities
-        and threats. <br> The extension works with <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
-        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
+        and threats. <br> The extension works with <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"<ol><li>
         Review the recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run
         <code>kubectl config current-context</code> and verify you are working with
@@ -26260,7 +26260,7 @@ interactions:
         Containers needs permissions for your AWS account. These permissions will
         be used to enable Kubernetes control plane logging on your cluster and establish
         a reliable pipeline between your cluster and Defender for Cloud''s backend
-        in the cloud. <br> Learn more about <a href=\"https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-introduction\">Microsoft
+        in the cloud. <br> Learn more about <a href=\"https://learn.microsoft.com/azure/security-center/defender-for-kubernetes-introduction\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"To
         grant the required permissions: <br> <ol><li>From the Azure portal, open Microsoft
         Defender for Cloud.</li><li>2. Open the \"Environment settings\" page and
@@ -26702,8 +26702,8 @@ interactions:
         full visibility of the security content from Microsoft Defender for servers,
         EC2 instances should be connected to Azure Arc. To ensure that all eligible
         EC2 instances automatically receive Azure Arc, enable auto-provisioning from
-        Defender for Cloud at the AWS account level. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Cloud at the AWS account level. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a>.","remediationDescription":"1. From the Defender
         for Cloud, open \"Environment settings\".<br>2. For the relevant AWS account,
         select the three dots at the end of the row, and select \"Edit settings\".<br>3.
@@ -26714,8 +26714,8 @@ interactions:
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["AWS"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/231dee23-84db-44d2-bd9d-c32fbcfb42a3","name":"231dee23-84db-44d2-bd9d-c32fbcfb42a3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"EC2
         instances should be connected to Azure Arc","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Connect
         your EC2 instances to Azure Arc in order to have full visibility to Microsoft
-        Defender for Servers security content. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and about <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Servers security content. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and about <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a> on hybrid-cloud environment.","remediationDescription":"1.
         From the Azure portal, open \"Servers - Azure Arc\".<br>2. From the top left
         corner, select \"Add\".<br>3. From \"Add a single server\", select \"Generate
@@ -30098,11 +30098,11 @@ interactions:
         or datasets.patch methods","categories":["Data"],"severity":"Medium","publishDates":{"ga":"03/29/2022","public":"01/19/2022"},"tactics":["Impact"],"techniques":["Data
         Manipulation"],"cloudProviders":["GCP"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/0faf27b6-f1d5-4f50-b22a-5d129cba0113","name":"0faf27b6-f1d5-4f50-b22a-5d129cba0113","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"GKE
         clusters should have Microsoft Defender''s extension for Azure Arc installed","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Microsoft
-        Defender''s <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
+        Defender''s <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/extensions\">cluster
         extension</a> provides security capabilities for your GKE clusters. The extension
         collects data from a cluster and its nodes to identify security vulnerabilities
-        and threats. <br> The extension works with <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
-        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
+        and threats. <br> The extension works with <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        Arc-enabled Kubernetes</a>. <br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks\">Microsoft
         Defender for Cloud''s security features for containerized environments</a>.","remediationDescription":"<ol><li>
         Review the recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run
         <code>kubectl config current-context</code> and verify you are working with
@@ -30115,7 +30115,7 @@ interactions:
         v3, an admission controller webhook for <a target=\"_blank\" href=\"https://www.openpolicyagent.org/\">Open
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner. <br> The extension works with
-        <a href=\"https://docs.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
+        <a href=\"https://learn.microsoft.com/azure/azure-arc/kubernetes/overview\">Azure
         Arc-enabled Kubernetes</a>.","remediationDescription":"<ol><li> Review the
         recommended Arc-enabled Kubernetes parameters.<br></li> <li> Run <code>kubectl
         config current-context</code> and verify you are working with the correct
@@ -30125,8 +30125,8 @@ interactions:
         Evasion"],"techniques":["Impair Defenses"],"cloudProviders":["GCP"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/9bbe2f0f-d6c6-48e8-b4d0-cf25d2c50206","name":"9bbe2f0f-d6c6-48e8-b4d0-cf25d2c50206","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"GCP
         VM instances should be connected to Azure Arc","assessmentType":"BuiltIn","policyDefinitionId":"","description":"Connect
         your GCP Virtual Machines to Azure Arc in order to have full visibility to
-        Microsoft Defender for Servers security content. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/''>Azure
-        Arc</a>, and about <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Microsoft Defender for Servers security content. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/''>Azure
+        Arc</a>, and about <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a> on hybrid-cloud environment.","remediationDescription":"1.
         From the Azure portal, open \"Servers - Azure Arc\". 2. From the top left
         corner, select \"Add\". 3. From \"Add a single server\", select \"Generate
@@ -30145,8 +30145,8 @@ interactions:
         full visibility of the security content from Microsoft Defender for servers,
         GCP VM instances should be connected to Azure Arc. To ensure that all eligible
         VM instances automatically receive Azure Arc, enable auto-provisioning from
-        Defender for Cloud at the GCP project level. Learn more about <a href=''https://docs.microsoft.com/azure/azure-arc/servers/overview''>Azure
-        Arc</a>, and <a href=''https://docs.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
+        Defender for Cloud at the GCP project level. Learn more about <a href=''https://learn.microsoft.com/azure/azure-arc/servers/overview''>Azure
+        Arc</a>, and <a href=''https://learn.microsoft.com/azure/security-center/defender-for-servers-introduction''>Microsoft
         Defender for Servers</a>.","remediationDescription":"1. From the Defender
         for Cloud, open \"Environment settings\". 2. For the relevant GCP project,
         select the three dots at the end of the row, and select \"Edit settings\".
@@ -31831,22 +31831,22 @@ interactions:
         Analytics agent should be installed on virtual machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","description":"Defender
         for Cloud collects data from your Azure virtual machines (VMs) to monitor
         for security vulnerabilities and threats. Data is collected using the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
+        href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
         Analytics agent</a>, formerly known as the Microsoft Monitoring Agent (MMA),
         which reads various security-related configurations and event logs from the
         machine and copies the data to your Log Analytics workspace for analysis.
         This agent is also required if your VMs are used by an Azure managed service
         such as Azure Kubernetes Service or Azure Service Fabric. We recommend configuring
-        <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">auto-provisioning
+        <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">auto-provisioning
         </a> to automatically deploy the agent. If you choose not to use auto-provisioning,
         manually deploy the agent to your VMs using the instructions in the remediation
         steps.","remediationDescription":"For multiple ways to install and configure
-        your Log Analytics agent see the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent#installation-and-configuration\">following
+        your Log Analytics agent see the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent#installation-and-configuration\">following
         instructions</a>.","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/151e82c5-5341-a74b-1eb0-bc38d2c84bb5","name":"151e82c5-5341-a74b-1eb0-bc38d2c84bb5","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"MFA
         should be enabled on accounts with read permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         read privileges to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -31858,7 +31858,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -31869,7 +31869,7 @@ interactions:
         should be enabled on accounts with write permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         write privileges to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -31881,7 +31881,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -31892,7 +31892,7 @@ interactions:
         should be enabled on accounts with owner permissions on subscriptions","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","description":"Multi-Factor
         Authentication (MFA) should be enabled for all subscription accounts with
         owner permissions to prevent a breach of accounts or resources.","remediationDescription":"To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview\">MFA
         using conditional access</a> you must have an <a href=\"https://azure.microsoft.com/pricing/details/active-directory/\">Azure
         AD Premium license</a> and have AD tenant admin permissions.<br>1. Select
         the relevant subscription or click ''Take action'' if it''s available. The
@@ -31904,7 +31904,7 @@ interactions:
         />&emsp;b. In the ''Cloud Apps or actions'' section''s ''Include'' tab, check
         that Application Id for ''Microsoft Azure Management'' App or ''All apps''
         is selected. In the ''Exclude'' tab, check that it is not excluded. <br>To
-        enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
+        enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults\">MFA
         security defaults</a> in Azure Active Directory (included in Azure AD free):<br>1.
         Sign in to the Azure AD - Properties page as a security administrator, Conditional
         Access administrator, or global administrator.<br>2. From the bottom of the
@@ -32033,7 +32033,7 @@ interactions:
         enabled, the protection status indicates that the resource is actively monitored.
         Even when Defender is enabled, multiple configuration settings should be validated
         on the agent, machine, workspace and SQL server to ensure active protection.","remediationDescription":"To
-        troubleshoot protection issues with <a href=''https://docs.microsoft.com/azure/defender-for-cloud/quickstart-enable-database-protections#enable-database-protection-on-your-subscription''>Microsoft
+        troubleshoot protection issues with <a href=''https://learn.microsoft.com/azure/defender-for-cloud/quickstart-enable-database-protections#enable-database-protection-on-your-subscription''>Microsoft
         Defender for Cloud</a>, verify that the agent is installed and connected to
         the enabled workspace (either default or custom workspace).<br>Also, verify
         from the workspace blade that the Defender solutions are installed. Inspect
@@ -32050,7 +32050,7 @@ interactions:
         Azure AD authentication enables simplified permission management and centralized
         identity management of database users and other Microsoft services.","remediationDescription":"To
         provision an Azure AD administrator for SQL server, see <a target=''blank''
-        href=''https://docs.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure''>Configure
+        href=''https://learn.microsoft.com/azure/sql-database/sql-database-aad-authentication-configure''>Configure
         and manage Azure Active Directory authentication with SQL Database, Managed
         Instance, or SQL Data Warehouse</a>","categories":["Data"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Initial
         Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/12018f4f-3d10-999b-e4c4-86ec25be08a1","name":"12018f4f-3d10-999b-e4c4-86ec25be08a1","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
@@ -32062,18 +32062,18 @@ interactions:
         will be fully retired on March 1, 2023.<br><br>To view all affected classic
         VMs make sure to select all your Azure subscriptions under ''directories +
         subscriptions'' tab.<br><br>Available resources and information about this
-        tool & migration:<br><a href=''https://docs.microsoft.com/azure/virtual-machines/classic-vm-deprecation?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Overview
+        tool & migration:<br><a href=''https://learn.microsoft.com/azure/virtual-machines/classic-vm-deprecation?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Overview
         of Virtual machines (classic) deprecation, step by step process for migration
-        & available Microsoft resources.</a><br><a href=''https://docs.microsoft.com/azure/virtual-machines/migration-classic-resource-manager-deep-dive?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Details
-        about Migrate to Azure Resource Manager migration tool.</a><br><a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-ps''>Migrate
+        & available Microsoft resources.</a><br><a href=''https://learn.microsoft.com/azure/virtual-machines/migration-classic-resource-manager-deep-dive?toc=/azure/virtual-machines/windows/toc.json&bc=/azure/virtual-machines/windows/breadcrumb/toc.json''>Details
+        about Migrate to Azure Resource Manager migration tool.</a><br><a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-ps''>Migrate
         to Azure Resource Manager migration tool using PowerShell.</a>","remediationDescription":"To
         migrate virtual machines to new ARM resources: <br>1. Go to the Virtual machines
         (classic) Portal Blade.<br>2. Under <b>Subscriptions</b>, select all available
         subscriptions to get full list of affected classic VMs.<br>3. Click on <b>Migrate
         to ARM.</b><br>4. Click on <b>Validate</b>. If validate failed, use the suggested
-        methods in the error messages or at <a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
+        methods in the error messages or at <a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
         Overview document</a> to fix the errors.<br>5. Click on <b>Prepare</b>. If
-        prepare failed, use the suggested methods in the error messages or at <a href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
+        prepare failed, use the suggested methods in the error messages or at <a href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview#unsupported-features-and-configurations''>Migration
         Overview document</a> to fix the errors.<br>6. View migrated virtual machines
         at <b>Virtual Machines</b> Portal Blade and Test their operation.<br>7. (Optional)
         Click on <b>Abort</b> to rollback migration.<br>8. Click on <b>Commit</b>.
@@ -32166,7 +32166,7 @@ interactions:
         account variable assets, in the Azure CLI - run the following command: Set-AzAutomationVariable
         -AutomationAccountName ''{AutomationAccountName}'' -Encrypted $true -Name
         ''{VariableName}'' -ResourceGroupName ''{ResourceGroupName}'' -Value ''{Value}''
-        <br> Read more <a href=\"https://docs.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-1.4.0\">here</a>","categories":["Compute"],"severity":"High","userImpact":"High","implementationEffort":"High","threats":["DataExfiltration","DataSpillage","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
+        <br> Read more <a href=\"https://learn.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-1.4.0\">here</a>","categories":["Compute"],"severity":"High","userImpact":"High","implementationEffort":"High","threats":["DataExfiltration","DataSpillage","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ad5bbaeb-7632-5edf-f1c2-752075831ce8","name":"ad5bbaeb-7632-5edf-f1c2-752075831ce8","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Diagnostic
         logs in Azure Data Lake Store should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","description":"Enable
         logs and retain them for up to a year. This enables you to recreate activity
@@ -32189,7 +32189,7 @@ interactions:
         Fabric clusters should only use Azure Active Directory for client authentication","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","description":"Perform
         Client authentication only via Azure Active Directory in Service Fabric","remediationDescription":"To
         enable client authentication using Azure Active Directory follow the instructions
-        to <a target=''_blank'' href=''https://docs.microsoft.com/azure/service-fabric/service-fabric-cluster-creation-setup-aad''>Set
+        to <a target=''_blank'' href=''https://learn.microsoft.com/azure/service-fabric/service-fabric-cluster-creation-setup-aad''>Set
         up Azure Active Directory for client authentication</a>.","categories":["Compute"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/7f04fc0c-4a3d-5c7e-ce19-666cb871b510","name":"7f04fc0c-4a3d-5c7e-ce19-666cb871b510","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Service
         Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","description":"Service
@@ -32240,14 +32240,14 @@ interactions:
         logs and retain them for up to a year. This enables you to recreate activity
         trails for investigation purposes when a security incident occurs or your
         network is compromised.","remediationDescription":"To enable Virtual Machines
-        Scale Sets diagnostics follow the <a target=''_blank'' href=''https://docs.microsoft.com/cli/azure/vmss/diagnostics?view=azure-cli-latest''>instructions</a>","categories":["Compute"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"plannedDeprecationDate":"12/2022","cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/47bb383c-8e25-95f0-c2aa-437add1d87d3","name":"47bb383c-8e25-95f0-c2aa-437add1d87d3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Storage
+        Scale Sets diagnostics follow the <a target=''_blank'' href=''https://learn.microsoft.com/cli/azure/vmss/diagnostics?view=azure-cli-latest''>instructions</a>","categories":["Compute"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"plannedDeprecationDate":"12/2022","cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/47bb383c-8e25-95f0-c2aa-437add1d87d3","name":"47bb383c-8e25-95f0-c2aa-437add1d87d3","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Storage
         accounts should be migrated to new Azure Resource Manager resources","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","description":"To
         benefit from new capabilities in Azure Resource Manager, you can migrate existing
         deployments from the Classic deployment model. Resource Manager enables security
         enhancements such as: stronger access control (RBAC), better auditing, ARM-based
         deployment and governance, access to managed identities, access to key vault
         for secrets, Azure AD-based authentication and support for tags and resource
-        groups for easier security management. <a target=''_blank'' href=''https://docs.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview''>Learn
+        groups for easier security management. <a target=''_blank'' href=''https://learn.microsoft.com/azure/virtual-machines/windows/migration-classic-resource-manager-overview''>Learn
         more</a>","remediationDescription":"To migrate storage accounts to new ARM
         resources : <br>1. Go to the Storage Account<br>2. Click on <b>Migrate to
         ARM</b> and follow the instructions.","categories":["Data"],"severity":"Low","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/88bbc99c-e5af-ddd7-6105-6150b2bfa519","name":"88bbc99c-e5af-ddd7-6105-6150b2bfa519","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Diagnostic
@@ -32270,7 +32270,7 @@ interactions:
         In your storage account, go to ''Firewalls and virtual networks''.<br>2. Under
         ''Allow access from'', choose ''Selected networks''.<br>3. Configure the relevant
         virtual networks and IP ranges that should be allowed to access your storage
-        account.<br>4. Configure <a target=''_blank'' href=''https://docs.microsoft.com/azure/storage/common/storage-network-security#exceptions''>\"Allow
+        account.<br>4. Configure <a target=''_blank'' href=''https://learn.microsoft.com/azure/storage/common/storage-network-security#exceptions''>\"Allow
         trusted Microsoft services to access your storage account\"</a>.","categories":["Networking"],"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","AccountBreach"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -32297,7 +32297,7 @@ interactions:
         Analytics agent should be installed on virtual machine scale sets","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","description":"Defender
         for Cloud collects data from your Azure virtual machines (VMs) to monitor
         for security vulnerabilities and threats. Data is collected using the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
+        href=\"https://learn.microsoft.com/azure/azure-monitor/platform/log-analytics-agent\">Log
         Analytics agent</a>, formerly known as the Microsoft Monitoring Agent (MMA),
         which reads various security-related configurations and event logs from the
         machine and copies the data to your workspace for analysis. You''ll also need
@@ -32308,10 +32308,10 @@ interactions:
         services such as Azure Kubernetes Service and Azure Service Fabric), follow
         the procedure in the remediation steps.","remediationDescription":"For information
         on how to add the Log Analytics agent as an extension to your virtual machine
-        scale set, see the <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/service-fabric/service-fabric-diagnostics-oms-agent\">following
+        scale set, see the <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/service-fabric/service-fabric-diagnostics-oms-agent\">following
         instructions</a>. For information on how to deploy the log analytics agent
         at scale on virtual machine scale set using Azure Policy please see the <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/azure-monitor/insights/vminsights-enable-at-scale-policy#policies-for-azure-virtual-machine-scale-sets\">following
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/azure-monitor/insights/vminsights-enable-at-scale-policy#policies-for-azure-virtual-machine-scale-sets\">following
         instructions</a>.","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["AccountBreach","DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/8941d121-f740-35f6-952c-6561d2b38d36","name":"8941d121-f740-35f6-952c-6561d2b38d36","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
         machine scale sets should be configured securely","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","description":"Remediate
         vulnerabilities in security configuration on your virtual machine scale sets
@@ -32324,7 +32324,7 @@ interactions:
         protection should be installed on virtual machine scale sets","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","description":"Install
         an endpoint protection solution on your virtual machines scale sets, to protect
         them from threats and vulnerabilities.","remediationDescription":"To install
-        an endpoint protection solution:<br>1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow
+        an endpoint protection solution:<br>1.  <a href=\"https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow
         the instructions in How do I turn on antimalware in my virtual machine scale
         set</a>","categories":["Compute"],"severity":"High","userImpact":"Low","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Defense
         Evasion","Command and Control","Initial Access","Execution"],"techniques":["Obfuscated
@@ -32345,7 +32345,7 @@ interactions:
         more</a>.","remediationDescription":"1. Register your subscription to Guest
         Configuration resource provider. 2. Install the Guest Configuration extension
         on your machine. 3. Enable a system-assigned managed identity, if one doesn''t
-        exist. Learn more in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
+        exist. Learn more in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
         Guest Configuration</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/69133b6b-695a-43eb-a763-221e19556755","name":"69133b6b-695a-43eb-a763-221e19556755","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Virtual
         machines'' Guest Configuration extension should be deployed with system-assigned
         managed identity","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","description":"The
@@ -32356,7 +32356,7 @@ interactions:
         enable a system-assigned managed identity, deploy the ''Enable a system-assigned
         managed identity'' initiative: 1. Register the resource provider. 2. Deploy
         requirements for Azure virtual machines. Learn more about configuring the
-        Guest Configuration prerequisites in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
+        Guest Configuration prerequisites in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/guest-configuration#enable-guest-configuration''>Enable
         Guest Configuration</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Unsecured Credentials"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/22489c48-27d1-4e40-9420-4303ad9cffef","name":"22489c48-27d1-4e40-9420-4303ad9cffef","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Windows
         Defender Exploit Guard should be enabled on machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","description":"Windows
@@ -32364,7 +32364,7 @@ interactions:
         Guard has four components that are designed to lock down devices against a
         wide variety of attack vectors and block behaviors commonly used in malware
         attacks while enabling enterprises to balance their security risk and productivity
-        requirements (Windows only).","remediationDescription":"1. <a href=''https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders''>Enable
+        requirements (Windows only).","remediationDescription":"1. <a href=''https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders''>Enable
         controlled folder access</a>.<br>2. Configure the following attack surface
         reduction rules: ''Block executable content from email client and webmail'',
         ''Block untrusted and unsigned processes that run from USB'', ''Block credential
@@ -32375,7 +32375,7 @@ interactions:
         from creating executable content'', ''Block Office communication application
         from creating child processes'', ''Block Win32 API calls from Office macros'',
         ''Block Adobe Reader from creating child processes'', ''Block Office applications
-        from injecting code into other processes''.<br>Learn more in <a href=''https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction''>Use
+        from injecting code into other processes''.<br>Learn more in <a href=''https://learn.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction''>Use
         attack surface reduction rules to prevent malware infection</a>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance","DataSpillage","DataExfiltration","AccountBreach"],"publishDates":{"public":"06/01/2021"},"tactics":["Execution","Credential
         Access","Defense Evasion","Privilege Escalation","Lateral Movement","Initial
         Access"],"techniques":["Exploitation for Client Execution","Exploitation for
@@ -32389,7 +32389,7 @@ interactions:
         install the monitoring agent on your Arc machine:<br>1. From the Azure Arc
         machine''s page, go to <b>Extensions</b> and select <b>Add</b>.<br>2. Follow
         the instructions to add the relevant extension.<br> You can also use ARM template
-        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://docs.microsoft.com/azure/virtual-machines/extensions/oms-windows''>Learn
+        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://learn.microsoft.com/azure/virtual-machines/extensions/oms-windows''>Learn
         more about Log Analytics agent for Windows.</a>","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/720a3e77-0b9a-4fa9-98b6-ddf0fd7e32c1","name":"720a3e77-0b9a-4fa9-98b6-ddf0fd7e32c1","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Log
         Analytics agent should be installed on Linux-based Azure Arc-enabled machines","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/1e7fed80-8321-4605-b42c-65fc300f23a3","description":"Defender
         for Cloud uses the Log Analytics agent (also known as OMS) to collect security
@@ -32398,7 +32398,7 @@ interactions:
         install the monitoring agent on your Arc machine:<br>1. From the Azure Arc
         machine''s page, go to <b>Extensions</b> and select <b>Add</b>.<br>2. Follow
         the instructions to add the relevant extension.<br> You can also use ARM template
-        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://docs.microsoft.com/azure/virtual-machines/extensions/oms-linux''>Learn
+        or Azure Policies to manage the extension deployment to Arc servers. <a href=''https://learn.microsoft.com/azure/virtual-machines/extensions/oms-linux''>Learn
         more about Log Analytics agent for Linux.</a>","categories":["Compute"],"preview":true,"severity":"High","userImpact":"Low","implementationEffort":"Moderate","threats":["MissingCoverage"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/fc84abc0-eee6-4758-8372-a7681965ca44","name":"fc84abc0-eee6-4758-8372-a7681965ca44","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Validity
         period of certificates stored in Azure Key Vault should not exceed 12 months","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560","description":"Ensure
         your certificates do not have a validity period that exceeds 12 months.","remediationDescription":"To
@@ -32438,7 +32438,7 @@ interactions:
         enable Microsoft Defender for servers on the subscription, those machines
         won''t be able to take advantage of just-in-time VM access, adaptive application
         controls, and network detections for Azure resources.<br>Learn more in <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for servers</a>.","remediationDescription":"To enable
         Microsoft Defender for servers on the identified workspaces, select the workspaces
         and select <b>Remediate</b>.","categories":["Compute"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"08/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/e9c320f1-03a0-4d2b-9a37-84b3bdc2e281","name":"e9c320f1-03a0-4d2b-9a37-84b3bdc2e281","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
@@ -32449,7 +32449,7 @@ interactions:
         machines.<br>It''s not enough to enable this optional Azure Defender plan
         on a subscription: it must also be enabled on the workspace. Until you enable
         the plan on the workspace too, it won''t protect your SQL servers and you
-        won''t be charged for the plan. <br> Learn more in <a href=''https://docs.microsoft.com/en-us/azure/security-center/defender-for-sql-usage''>Enable
+        won''t be charged for the plan. <br> Learn more in <a href=''https://learn.microsoft.com/en-us/azure/security-center/defender-for-sql-usage''>Enable
         Azure Defender for SQL servers on machines</a>.","remediationDescription":"To
         enable Microsoft Defender for SQL on machines on the identified workspaces,
         select the workspaces and select <b>Remediate</b>.","categories":["Data"],"preview":true,"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["MissingCoverage"],"publishDates":{"public":"09/29/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/14acab4e-ad95-11ec-b909-0242ac120002","name":"14acab4e-ad95-11ec-b909-0242ac120002","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
@@ -32468,19 +32468,19 @@ interactions:
         (AAD): </u></li><br><ol><li>Map all the resources that currently access to
         the Azure Cosmos DB account with keys or access tokens.</li> <li>Create an
         Azure Active Directory (AAD) identity for each of these resources:</li><ol
-        type=\"a\"><li> For Azure resources, you can <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview\">create
-        a managed identity</a> . You may <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types\">choose
+        type=\"a\"><li> For Azure resources, you can <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview\">create
+        a managed identity</a> . You may <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types\">choose
         between system-assigned and user-assigned managed identities</a>.</li><li>For
-        non-Azure resources, <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal\">create
+        non-Azure resources, <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal\">create
         an AAD identity</a>. </li></ol><li> Grant each AAD identity the minimum permission
         it requires. When possible, we recommend you use one of the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">2
+        href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">2
         built-in role definitions</a>: Cosmos DB Built-in Data Reader or Cosmos DB
         Built-in Data Contributor. </li> <li>Validate that the new resource is functioning
         correctly. After new permissions are granted to identities, it may take a
         few hours until they propagate. When all resources are working correctly with
         the new identities, continue to the next step. </li></ol><br><a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">You
+        href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions\">You
         can read more about configuring role-based access control with Azure Active
         Directory for your Azure Cosmos DB account</a>. <br> <br> <li><u> Enforce
         RBAC as the only authentication method:</u> <br> You may choose one of the
@@ -32490,9 +32490,9 @@ interactions:
         = az cosmosdb show --name $cosmosdbname --resource-group $resourcegroup |
         ConvertFrom-Json</code><br><br><code>az resource update --ids $cosmosdb.id
         --set properties.disableLocalAuth=true --latest-include-preview</code></li>
-        <br> <li>Deploy these changes in your ARM template <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth\">to
+        <br> <li>Deploy these changes in your ARM template <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#disable-local-auth\">to
         enforce RBAC as the only authentication method</a>.<br><br><a target=\"_blank\"
-        href=\"https://docs.microsoft.com/en-us/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource\">You
+        href=\"https://learn.microsoft.com/en-us/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource\">You
         can read more about using ARM templates on existing resources</a>.</li><br></ol>After
         these changes have been implemented, all access attempts that use primary/secondary
         key or access tokens authentication will be denied.<br></ol>","categories":["IdentityAndAccess"],"severity":"Medium","userImpact":"Moderate","implementationEffort":"Low","threats":["DataExfiltration","DataSpillage","MaliciousInsider"],"publishDates":{"public":"06/01/2022"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/2482620f-f324-4add-af68-2e01e27485e9","name":"2482620f-f324-4add-af68-2e01e27485e9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Over-provisioned
@@ -32765,8 +32765,8 @@ interactions:
         configure Private Link for Azure Database for PostgreSQL:<br>1. Navigate to
         your Azure Database for PostgreSQL. 2. Select Private Endpoint Connections
         in the left-hand pane 3. Click on \"+Private Endpoint\" and follow the instructions
-        provided <a href=\"https://docs.microsoft.com/azure/postgresql/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/postgresql/howto-configure-privatelink-portal</a>.
+        provided <a href=\"https://learn.microsoft.com/azure/postgresql/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/postgresql/howto-configure-privatelink-portal</a>.
         <br>For more information, see: <a href=\"https://aka.ms/pgprivatelink\" target=\"_blank\">https://aka.ms/pgprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -32779,8 +32779,8 @@ interactions:
         configure Private Link for Azure Database for MariaDB:<br>1. Navigate to your
         Azure Database for MariaDB. 2. Select Private Endpoint Connections in the
         left-hand pane 3. Click on \"+Private Endpoint\" and follow the instructions
-        provided <a href=\"https://docs.microsoft.com/azure/mariadb/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/mariadb/howto-configure-privatelink-portal</a>.<br>For
+        provided <a href=\"https://learn.microsoft.com/azure/mariadb/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/mariadb/howto-configure-privatelink-portal</a>.<br>For
         more information, see: <a href=\"https://aka.ms/mariadbprivatelink\" target=\"_blank\">https://aka.ms/mariadbprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -32793,8 +32793,8 @@ interactions:
         configure Private Link for Azure Database for MySQL:<br>1. Navigate to your
         Azure Database for MySQL. 2. Select Private Endpoint Connections in the left-hand
         pane 3. Click on \"+Private Endpoint\" and follow the instructions provided
-        <a href=\"https://docs.microsoft.com/azure/mysql/howto-configure-privatelink-portal\"
-        target=\"_blank\">https://docs.microsoft.com/azure/mysql/howto-configure-privatelink-portal</a>.<br>For
+        <a href=\"https://learn.microsoft.com/azure/mysql/howto-configure-privatelink-portal\"
+        target=\"_blank\">https://learn.microsoft.com/azure/mysql/howto-configure-privatelink-portal</a>.<br>For
         more information, see: <a href=\"https://aka.ms/mysqlprivatelink\" target=\"_blank\">https://aka.ms/mysqlprivatelink</a>","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
@@ -32812,7 +32812,7 @@ interactions:
         for your Function app.<br>2. Select Configuration, and go to the General Settings
         tab.<br>3. Select the General Settings tab.<br>4. Under the FTP state section,
         select FTPS only.<br>For more information, visit here: <a href=\"https://aka.ms/deploy-ftp\"
-        target=\"_blank\">https://aka.ms/deploy-ftp</a><br>Learn more about <a href=\"https://docs.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability\"
+        target=\"_blank\">https://aka.ms/deploy-ftp</a><br>Learn more about <a href=\"https://learn.microsoft.com/en-us/azure/azure-functions/functions-deployment-technologies#deployment-technology-availability\"
         target=\"_blank\">Azure Functions Deployment Technology Availability</a>","categories":["AppServices"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access","Discovery"],"techniques":["Network Sniffing"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/19beaa2a-a126-b4dd-6d35-617f6cc83fca","name":"19beaa2a-a126-b4dd-6d35-617f6cc83fca","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"FTPS
         should be required in web apps","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","description":"Enable
@@ -32893,7 +32893,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Implementing Transparent Data Encryption (TDE) with
         your own key provides you with increased transparency and control over the
         TDE Protector, increased security with an HSM-backed external service, and
@@ -32903,7 +32903,7 @@ interactions:
         the SQL server. 2. On the Transparent data encryption page, select Customer-managed
         key. 3. For Key selection method, choose Select a key or Enter a key identifier
         if you have one. 4. If you chose Select a key, configure the desired Key vault
-        and Key. For more information, see this article:  https://docs.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6b51b7f7-cbed-75bf-8a02-43384bf47562","name":"6b51b7f7-cbed-75bf-8a02-43384bf47562","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"[Enable
+        and Key. For more information, see this article:  https://learn.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6b51b7f7-cbed-75bf-8a02-43384bf47562","name":"6b51b7f7-cbed-75bf-8a02-43384bf47562","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"[Enable
         if required] MySQL servers should use customer-managed keys to encrypt data
         at rest","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","description":"Recommendations
         to use customer-managed keys for encryption of data at rest are not assessed
@@ -32913,7 +32913,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your MySQL servers. By default, the data is encrypted at rest with
         service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -32937,7 +32937,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your PostgreSQL servers. By default, the data is encrypted at rest
         with service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -32973,7 +32973,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Implementing Transparent Data Encryption (TDE) with
         your own key provides increased transparency and control over the TDE Protector,
         increased security with an HSM-backed external service, and promotion of separation
@@ -32983,7 +32983,7 @@ interactions:
         the Transparent data encryption page, select Customer-managed key. 3. For
         Key selection method, choose Select a key or Enter a key identifier if you
         have one. 4. If you chose Select a key, configure the desired Key vault and
-        Key. For more information, see this article:  https://docs.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/be264018-593c-1162-bd5e-b74a39396652","name":"be264018-593c-1162-bd5e-b74a39396652","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
+        Key. For more information, see this article:  https://learn.microsoft.com/azure/sql-database/transparent-data-encryption-byok-azure-sql","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/be264018-593c-1162-bd5e-b74a39396652","name":"be264018-593c-1162-bd5e-b74a39396652","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
         Cache for Redis should reside within a virtual network","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","description":"Azure
         Virtual Network (VNet) deployment provides enhanced security and isolation
         for your Azure Cache for Redis, as well as subnets, access control policies,
@@ -33012,7 +33012,7 @@ interactions:
         settings</b> page, select the relevant subscription.<br>2. Open the <b>Auto
         provisioning</b> page and set the toggle to <b>On</b> for the Log Analytics
         agent.<br>3. Select the workspace to receive the data from the machines.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Configure
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Configure
         auto provisioning for agents and extensions from Microsoft Defender for Cloud</a>","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/77758c9d-8a56-5f54-6ff7-69a762ca6004","name":"77758c9d-8a56-5f54-6ff7-69a762ca6004","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Subscriptions
         should have a contact email address for security issues","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","description":"To
         ensure the relevant people in your organization are notified when there is
@@ -33031,7 +33031,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of the contents of your registries. By default, the data is encrypted
         at rest with service-managed keys, but customer-managed keys (CMK) are commonly
@@ -33137,7 +33137,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Customer-managed keys (CMK) are commonly required
         to meet regulatory compliance standards. CMKs enable the data stored in Cognitive
         Services to be encrypted with an Azure Key Vault key created and owned by
@@ -33170,7 +33170,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Use customer-managed keys to manage the encryption
         at rest of your Azure Cosmos DB. By default, the data is encrypted at rest
         with service-managed keys, but customer-managed keys (CMK) are commonly required
@@ -33261,7 +33261,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Secure your storage account with greater flexibility
         using customer-managed keys (CMKs). When you specify a CMK, that key is used
         to protect and control access to the key that encrypts your data. Using CMKs
@@ -33307,7 +33307,7 @@ interactions:
         requirements. <br> To enable this recommendation, navigate to your Security
         Policy for the applicable scope, and update the *Effect* parameter for the
         corresponding policy to audit or enforce the use of customer-managed keys.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/tutorial-security-policy?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Manage
         security policies</a>.<br>Manage encryption at rest of your Azure Machine
         Learning workspace data with customer-managed keys (CMK). By default, customer
         data is encrypted with service-managed keys, but CMKs are commonly required
@@ -33379,14 +33379,14 @@ interactions:
         SSH itself provides an encrypted connection, using passwords with SSH still
         leaves the VM vulnerable to brute-force attacks. The most secure option for
         authenticating to an Azure Linux virtual machine over SSH is with a public-private
-        key pair, also known as SSH keys. Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed\">Detailed
+        key pair, also known as SSH keys. Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed\">Detailed
         steps: Create and manage SSH keys for authentication to a Linux VM in Azure</a>.","remediationDescription":"To
         use SSH for authentication to your Linux virtual machine: 1. Create an SSH
         key pair for the Linux virtual machine. 2. Disable password authentication
         in the Linux virtual machine''s configuration. 3. Update the SSH key in your
         Azure Resource Manager template (replace the admin password with the adminSSHKey
         parameter) or via the Azure CLI (with the --generate-ssh-keys command). Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-machines/linux/mac-create-ssh-keys\">Create
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-machines/linux/mac-create-ssh-keys\">Create
         and use an SSH public-private key pair for Linux VMs in Azure</a>.","categories":["Compute"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Credential
         Access"],"techniques":["Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/75396512-3323-9be4-059d-32ecb113c3de","name":"75396512-3323-9be4-059d-32ecb113c3de","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Private
         endpoint connections on Azure SQL Database should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","description":"Private
@@ -33395,7 +33395,7 @@ interactions:
         Connections: 1. Open Azure SQL Database and browse to the server blade 2.
         Navigate to Security --> Private endpoint connections blade via the navigation
         menu 3.  Select the \"+ Private Endpoint\" button 4. Follow the instructions
-        here: https://docs.microsoft.com/azure/azure-sql/database/private-endpoint-overview#how-to-set-up-private-link-for-azure-sql-database.","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
+        here: https://learn.microsoft.com/azure/azure-sql/database/private-endpoint-overview#how-to-set-up-private-link-for-azure-sql-database.","categories":["Data"],"preview":true,"severity":"Medium","publishDates":{"public":"06/01/2021"},"tactics":["Discovery","Impact","Collection","Initial
         Access"],"techniques":["Network Sniffing","Network Denial of Service","Endpoint
         Denial of Service","Man-in-the-Middle","Data Manipulation","External Remote
         Services"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/22e93e92-4a31-b4cd-d640-3ef908430aa6","name":"22e93e92-4a31-b4cd-d640-3ef908430aa6","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Public
@@ -33421,12 +33421,12 @@ interactions:
         protocol, Transport Layer Security (TLS). TLS secures communications over
         a network by using security certificates to encrypt a connection between machines.","remediationDescription":"To
         ensure your windows web server is using secure communication protocol: 1.
-        Enable Guest Configuration extension and system assigned identity: https://docs.microsoft.com/azure/virtual-machines/extensions/guest-configuration
+        Enable Guest Configuration extension and system assigned identity: https://learn.microsoft.com/azure/virtual-machines/extensions/guest-configuration
         2. Enable TLS on your machine. For Windows Server 2008 R2, Windows Server
         2012, or Windows 7, install the update at https://support.microsoft.com/help/3140245.
         For Windows 2012 R2 Server or later, no updates are necessary. 3. Update the
         Windows and WinHTTP registry keys (or verify that they''re correct) according
-        to the information here: https://docs.microsoft.com/dotnet/framework/network-programming/tls#configuring-schannel-protocols-in-the-windows-registry.","categories":["Compute"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f738efb8-005f-680d-3d43-b3db762d6243","name":"f738efb8-005f-680d-3d43-b3db762d6243","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Cognitive
+        to the information here: https://learn.microsoft.com/dotnet/framework/network-programming/tls#configuring-schannel-protocols-in-the-windows-registry.","categories":["Compute"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f738efb8-005f-680d-3d43-b3db762d6243","name":"f738efb8-005f-680d-3d43-b3db762d6243","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Cognitive
         Services accounts should restrict network access","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","description":"Network
         access to Cognitive Services accounts should be restricted. Configure network
         rules so only applications from allowed networks can access the Cognitive
@@ -33509,11 +33509,11 @@ interactions:
         enable Network Watcher: 1. Navigate to the Network Watcher page on the Azure
         portal 2. Select the relevant subscription and click on the region drop down
         3. For any regions that are listed as Disabled, enable them by selecting \"Enable
-        network watcher\" in the context menu For more information, visit here: https://docs.microsoft.com/azure/network-watcher/network-watcher-create","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f0fb2a7e-16d5-849f-be57-86db712e9bd0","name":"f0fb2a7e-16d5-849f-be57-86db712e9bd0","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
+        network watcher\" in the context menu For more information, visit here: https://learn.microsoft.com/azure/network-watcher/network-watcher-create","categories":["Data"],"preview":true,"severity":"Low","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/f0fb2a7e-16d5-849f-be57-86db712e9bd0","name":"f0fb2a7e-16d5-849f-be57-86db712e9bd0","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Microsoft
         Defender for Resource Manager should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","description":"Microsoft
         Defender for Resource Manager automatically monitors the resource management
         operations in your organization. Defender for Cloud detects threats and alerts
-        you about suspicious activity. Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-resource-manager-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        you about suspicious activity. Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-resource-manager-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Resource Manager</a>. Enabling this Defender plan
         results in charges. Learn about the pricing details per region on Defender
         for Cloud''s pricing page: https://azure.microsoft.com/services/defender-for-cloud/#pricing.","remediationDescription":"To
@@ -33529,7 +33529,7 @@ interactions:
         Defender for DNS provides an additional layer of protection for your cloud
         resources by continuously monitoring all DNS queries from your Azure resources.
         Defender for DNS alerts you about suspicious activity at the DNS layer. Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-dns-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-dns-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for DNS</a>. Enabling this Defender plan results in
         charges. Learn about the pricing details per region on Defender for Cloud''s
         pricing page: https://azure.microsoft.com/services/defender-for-cloud/#pricing.","remediationDescription":"To
@@ -35690,7 +35690,7 @@ interactions:
         attack surface.<br>This typically occurs when this IP address doesn''t communicate
         regularly with this resource. Alternatively, the IP address has been flagged
         as malicious by Defender for Cloud''s threat intelligence sources. Learn more
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/adaptive-network-hardening?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Improve
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/adaptive-network-hardening?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Improve
         your network security posture with adaptive network hardening</a>.","remediationDescription":"To
         review the recommended changes to the traffic rules for your network security
         groups, select a machine or select ''Take action''","categories":["Networking"],"severity":"High","userImpact":"Moderate","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Lateral
@@ -35706,7 +35706,7 @@ interactions:
         for Cloud has identified some overly-permissive inbound rules for management
         ports in your Network Security Group. Enable just-in-time access control to
         protect your VM from internet-based brute-force attacks. Learn more in <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
         just-in-time (JIT) VM access</a>.","remediationDescription":"To enable just-in-time
         VM access:<br><ul><li>Select one or more VMs from the list below and select
         \"Remediate\", or select \"Take action\" if you''ve arrived from a recommendation
@@ -35729,7 +35729,7 @@ interactions:
         the rule by applying a less permissive range of source IP ranges.<br>4. Click
         ''Save''. <br>Use Defender for Cloud''s Just-in-time (JIT) virtual machine
         (VM) access to lock down inbound traffic to your Azure VMs by demand. Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/just-in-time-access-overview?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Understanding
         just-in-time (JIT) VM access</a>.","categories":["Networking"],"severity":"Medium","userImpact":"Moderate","implementationEffort":"Moderate","threats":["ThreatResistance","MaliciousInsider"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Initial
         Access"],"techniques":["External Remote Services"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/c3b51c94-588b-426b-a892-24696f9e54cc","name":"c3b51c94-588b-426b-a892-24696f9e54cc","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"IP
         forwarding on your virtual machine should be disabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","description":"Defender
@@ -35787,7 +35787,7 @@ interactions:
         In the Network interfaces page, select the ''Network security group'' menu
         item.<br>&emsp;&emsp;&emsp;&emsp;iii. Click ''Edit'' at the top of the page.<br>&emsp;&emsp;&emsp;&emsp;iv.
         Follow the on-screen instructions and select the Network Security Group to
-        assign to this NIC.<br><a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-network/security-overview\">Learn
+        assign to this NIC.<br><a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-network/security-overview\">Learn
         more</a>.","categories":["Networking"],"severity":"High","userImpact":"High","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Lateral
         Movement","Discovery","Exfiltration","Execution","Command and Control","Initial
         Access","Impact","Credential Access","Collection"],"techniques":["Remote Services","Network
@@ -35817,7 +35817,7 @@ interactions:
         In the Network interfaces page, select the ''Network security group'' menu
         item.<br>&emsp;&emsp;&emsp;&emsp;iii. Select ''Edit'' at the top of the page.<br>&emsp;&emsp;&emsp;&emsp;iv.
         Follow the on-screen instructions and select the network security group to
-        assign to this NIC.<br><a target=\"_blank\" href=\"https://docs.microsoft.com/azure/virtual-network/security-overview\">Learn
+        assign to this NIC.<br><a target=\"_blank\" href=\"https://learn.microsoft.com/azure/virtual-network/security-overview\">Learn
         more</a>.","categories":["Networking"],"severity":"Low","userImpact":"Low","implementationEffort":"Moderate","threats":["MaliciousInsider","DataSpillage","DataExfiltration"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ffff0522-1e88-47fc-8382-2a80ba848f5d","name":"ffff0522-1e88-47fc-8382-2a80ba848f5d","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Machines
         should have a vulnerability assessment solution","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","description":"Defender
         for Cloud regularly checks your connected machines to ensure they''re running
@@ -35871,7 +35871,7 @@ interactions:
         subscription, you won''t be charged. If you later create key vaults on this
         subscription, they''ll automatically be protected and charges will begin.
         Learn about the <a target=\"_blank\" href=\"https://aka.ms/pricing-security-center\">pricing
-        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-key-vault-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-key-vault-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Key Vault</a>.","remediationDescription":"To enable
         Microsoft Defender for Key Vault on all key vaults in a subscription:<br>1.
         From Defender for Cloud''s <b>Environment settings</b> page, select the relevant
@@ -35888,7 +35888,7 @@ interactions:
         you won''t be charged. If you later create Azure SQL Database servers on this
         subscription, they''ll automatically be protected and charges will begin.
         Learn about the <a target=\"_blank\" href=\"https://aka.ms/pricing-security-center\">pricing
-        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        details per region</a>.<br>Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for SQL</a>.","remediationDescription":"To enable this
         plan on all Azure SQL Database servers in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -35907,7 +35907,7 @@ interactions:
         SQL servers on machines. If you don''t have any SQL servers on machines in
         this subscription, no charges will be incurred.<br>If you create any SQL servers
         on machines on this subscription in the future, they will automatically be
-        protected and charges will begin at that time.<br> <a href=''https://docs.microsoft.com/azure/azure-sql/database/advanced-data-security''>Learn
+        protected and charges will begin at that time.<br> <a href=''https://learn.microsoft.com/azure/azure-sql/database/advanced-data-security''>Learn
         more about Microsoft Defender for SQL servers on machines.</a>","remediationDescription":"To
         enable this plan on all SQL servers on machines in a subscription:<br>1. From
         Defender for Cloud''s <b>Environment settings</b> page, select the relevant
@@ -35925,7 +35925,7 @@ interactions:
         later create Azure Storage accounts on this subscription, they''ll automatically
         be protected and charges will begin. Learn about the <a target=\"_blank\"
         href=\"https://aka.ms/pricing-security-center\">pricing details per region</a>.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-storage-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-storage-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Storage</a>.","remediationDescription":"To enable
         this plan on all Azure Storage accounts in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -35942,7 +35942,7 @@ interactions:
         Service plans in this subscription, no charges will be incurred.<br>If you
         create any App Service plans on this subscription in the future, they will
         automatically be protected and charges will begin at that time.<br>Learn more
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-app-service-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Protect
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-app-service-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Protect
         your web apps and APIs</a>.","remediationDescription":"To enable this plan
         on all App Service plans in a subscription:<br>1. From Defender for Cloud''s
         <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -35971,7 +35971,7 @@ interactions:
         have any Kubernetes clusters in this subscription, no charges will be incurred.<br>If
         you create any Kubernetes clusters on this subscription in the future, they
         will automatically be protected and charges will begin at that time.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/container-security?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/container-security?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for Containers</a>.","remediationDescription":"To enable
         this plan on all Kubernetes clusters in a subscription:<br>1. From Defender
         for Cloud''s <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -35988,7 +35988,7 @@ interactions:
         servers. If you don''t have any servers in this subscription, no charges will
         be incurred.<br>If you create any servers on this subscription in the future,
         they will automatically be protected and charges will begin at that time.<br>Learn
-        more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-servers-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for servers</a>.","remediationDescription":"To enable
         this plan on all servers in a subscription:<br>1. From Defender for Cloud''s
         <b>Environment settings</b> page, select the relevant subscription.<br>2.
@@ -36014,7 +36014,7 @@ interactions:
         Defender for open-source relational databases should be enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/microsoft.authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835","description":"Microsoft
         Defender for open-source relational databases detects anomalous activities
         indicating unusual and potentially harmful attempts to access or exploit databases.
-        Learn more in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-databases-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
+        Learn more in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-databases-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Introduction
         to Microsoft Defender for open-source relational databases</a>.<br><br>Important:
         Enabling this plan will result in charges for protecting your open-source
         relational databases. If you don''t have any open-source relational databases
@@ -36217,11 +36217,11 @@ interactions:
         protection health issues on machines should be resolved","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/8e42c1f2-a2ab-49bc-994a-12bcd0dc4ac2","description":"Resolve
         endpoint protection health issues on your virtual machines to protect them
         from latest threats and vulnerabilities. See the documentation for the <a
-        target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds#supported-endpoint-protection-solutions-?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
+        target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds#supported-endpoint-protection-solutions-?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
         protection solutions supported by Defender for Cloud</a> and the <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
+        href=\"https://learn.microsoft.com/azure/defender-for-cloud/endpoint-protection-recommendations-technical?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">endpoint
         protection assessments</a>.","remediationDescription":"<br>1. Confirm that
-        your solution is on the list of <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">tools
+        your solution is on the list of <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds-servers?tabs=features-windows#endpoint-supported\">tools
         supported by Defender for Cloud</a>. <br>2. For a list of possible health
         issues with your solution and advice on how to resolve the health issues,
         consult this page of the <a target=\"_blank\" href=\"https://aka.ms/endpoint-health-issues\">Defender
@@ -36236,7 +36236,7 @@ interactions:
         list. Otherwise, remove them.","categories":["Compute"],"preview":true,"severity":"Low","userImpact":"Low","implementationEffort":"Low","threats":["ElevationOfPrivilege","MaliciousInsider"],"publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c","name":"dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with read permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -36244,26 +36244,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">read
         permissions</a> on Azure resources.<br> More details and frequently asked
-        questions are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        questions are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -36280,7 +36280,7 @@ interactions:
         Access","Credential Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/c0cb17b2-0607-48a7-b0e0-903ed22de39b","name":"c0cb17b2-0607-48a7-b0e0-903ed22de39b","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with write permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/931e118d-50a1-4457-a5e4-78550e086c52","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -36288,26 +36288,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">write
         permissions</a> on Azure resources.<br>More details and frequently asked questions
-        are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -36324,7 +36324,7 @@ interactions:
         Access","Credential Access"],"techniques":["Valid Accounts","Brute Force"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/6240402e-f77c-46fa-9060-a7ce53997754","name":"6240402e-f77c-46fa-9060-a7ce53997754","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Accounts
         with owner permissions on Azure resources should be MFA enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/e3e008c3-56b9-4133-8fd7-d3347377402a","description":"If
         you only use passwords to authenticate your users, you are leaving an attack
-        vector open.<br>By enabling <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
+        vector open.<br>By enabling <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Multi-Factor
         Authentication</a> (MFA), you provide better security for your accounts, while
         still allowing your users to authenticate to almost any application.<br>Multi-factor
         authentication is a process by which users are prompted, during the sign-in
@@ -36332,26 +36332,26 @@ interactions:
         attacks, we recommend you to enable MFA for all accounts that have <a target=\"_blank\"
         href=\"https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions#role-defintion\">owner
         permissions</a> on Azure resources.<br> More details and frequently asked
-        questions are available here: <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
+        questions are available here: <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/defender-for-cloud/multi-factor-authentication-enforcement\">Manage
         multi-factor authentication (MFA) enforcement on your subscriptions</a>","remediationDescription":"There
         are multiple ways to enable MFA for your Azure Active Directory (AD) users
         based on the licenses that your organization owns. The following are the supported
         MFA emblement options to be compliant:<br><br><u>Security defaults (included
-        in Azure AD free)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        in Azure AD free)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         security defaults</a> in Azure Active Directory:<ol><li>Sign in to the <a
         href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Properties\">Azure
         AD - Properties</a> page as a Security administrator, Conditional Access administrator,
         or Global administrator.</li><li>From the bottom of the page, select <strong>Manage
         security defaults</strong>.</li><li>Set Enable security defaults to <strong>Yes</strong>.</li><li>Select
         <strong>Save</strong>.</li></ol><u>Per-user assignment (included in Microsoft
-        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
+        365 Business, E3, or E5 plans)</u><br>To enable <a href=\"https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates#change-the-status-for-a-user\">MFA
         per-user assignment</a>:<ol><li>Sign in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers\">Azure
         AD - All users</a> page as a Global administrator.</li><li>From the top menu,
         select <strong>Per-user MFA</strong>.</li><li>Find the user(s) you want to
         enable for per-user MFA and check the box next to the name(s) of the user(s).</li><li>On
         the right-hand side, under <strong>quick steps</strong>, choose <strong>Enable</strong>.</li><li>Confirm
         your selection in the pop-up window that opens.</li></ol><u>Conditional access
-        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
+        (CA) policy (included in Azure AD Premium plans)</u><br>To enable <a href=\"https://learn.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc_id=Portal-Microsoft_Azure_Security\">MFA
         using conditional access</a> you must have an <strong>Azure AD Premium license</strong>:<ol><li>Sign
         in to the <a href=\"https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies/menuid/Policies\">Azure
         AD &ndash; Conditional Access</a> page as a Conditional Access administrator,
@@ -36463,9 +36463,9 @@ interactions:
         out of the recommendation by using the exemption workflow for any ports that
         need to remain open.<br>For all other findings, remediate per instructions
         below:<br> &bull; Need to secure network traffic for a single VNet, please
-        follow instruction to setup <a href=''https://docs.microsoft.com/azure/virtual-network/manage-network-security-group''>Network
+        follow instruction to setup <a href=''https://learn.microsoft.com/azure/virtual-network/manage-network-security-group''>Network
         Security Groups (NSG)</a>.<br> &bull; Need to secure network traffic for one
-        or more peered VNet, please follow instruction to setup <a href=''https://docs.microsoft.com/azure/firewall/tutorial-firewall-deploy-portal''>Azure
+        or more peered VNet, please follow instruction to setup <a href=''https://learn.microsoft.com/azure/firewall/tutorial-firewall-deploy-portal''>Azure
         Firewall</a>.<br>","categories":["Networking"],"preview":true,"severity":"High","userImpact":"High","implementationEffort":"Low","threats":["ThreatResistance"],"publishDates":{"public":"04/04/2022"},"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/41503391-efa5-47ee-9282-4eff6131462c","name":"41503391-efa5-47ee-9282-4eff6131462c","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Running
         container images should have vulnerability findings resolved","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/0fc39691-5a3f-4e3e-94ee-2e6447309ad9","description":"Container
         image vulnerability assessment scans container images running on your Kubernetes
@@ -36497,12 +36497,12 @@ interactions:
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner.<p>Defender for Cloud requires
         the Add-on to audit and enforce security capabilities and compliance inside
-        your clusters. <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes\">
+        your clusters. <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes\">
         Learn more</a>.</p><p>Requires Kubernetes v1.14.0 or later.</p>","remediationDescription":"To
         configure the Azure Policy Add-on for use with your Azure Kubernetes Service
-        cluster, follow the instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-add-on-for-aks?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Install
+        cluster, follow the instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-add-on-for-aks?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Install
         Azure Policy Add-on for AKS</a>.<br><br><u>Auto provisioning:</u><br>You can
-        also auto deploy this add-on as explained in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/enable-data-collection#enable-auto-provisioning-of-the-log-analytics-agent-and-extensions-\">Enable
+        also auto deploy this add-on as explained in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/enable-data-collection#enable-auto-provisioning-of-the-log-analytics-agent-and-extensions-\">Enable
         auto provisioning of extensions</a>.<br>When auto provisioning for the add-on
         is set to <b>On</b>, the extension is enabled by default in all existing and
         future clusters (that meet the add-on installation requirements).","categories":["Container"],"severity":"High","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/0642d770-b189-42ef-a2ce-9dcc3ec6c169","name":"0642d770-b189-42ef-a2ce-9dcc3ec6c169","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
@@ -36512,10 +36512,10 @@ interactions:
         Policy Agent</a> (OPA), to apply at-scale enforcements and safeguards on your
         clusters in a centralized, consistent manner.","remediationDescription":"To
         configure the Azure Policy extension for use with your Azure Arc-enabled Kubernetes
-        cluster, follow the instructions in <a href=''https://docs.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-extension-for-azure-arc-enabled-kubernetes''>#Install
+        cluster, follow the instructions in <a href=''https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#install-azure-policy-extension-for-azure-arc-enabled-kubernetes''>#Install
         Azure Policy Extension for Azure Arc-enabled Kubernetes</a>.<br><br><u>Auto
         provisioning:</u><br>You can also auto deploy this extension as explained
-        in <a target=\"_blank\" href=\"https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#enable-auto-provisioning-of-extensions\">Enable
+        in <a target=\"_blank\" href=\"https://learn.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#enable-auto-provisioning-of-extensions\">Enable
         auto provisioning of extensions</a> .<br>When auto provisioning for the extension
         is set to \"on\", the extension is enabled by default in all existing and
         future clusters (that meet the extension installation requirements).","categories":["Container"],"preview":true,"severity":"High","threats":["MissingCoverage"],"publishDates":{"ga":"06/01/2022","public":"06/01/2022"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/0adc5395-9169-4b9b-8687-af838d69410a"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/405c9ae6-49f9-46c4-8873-a86690f27818","name":"405c9ae6-49f9-46c4-8873-a86690f27818","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Container
@@ -36688,24 +36688,24 @@ interactions:
         ensure that only applications from allowed networks, machines, or subnets
         can access your cluster, restrict access to your Kubernetes API server. You
         can restrict access by defining authorized IP ranges, or by setting up your
-        API servers as private clusters as explained in<a target=\"_blank\" href=\"https://docs.microsoft.com/azure/aks/private-clusters\">Create
+        API servers as private clusters as explained in<a target=\"_blank\" href=\"https://learn.microsoft.com/azure/aks/private-clusters\">Create
         a private Azure Kubernetes Service cluster</a>.","remediationDescription":"To
         manually configure authorized IP ranges, follow the steps in <a target=\"_blank\"
-        href=\"https://docs.microsoft.com/azure/aks/api-server-authorized-ip-ranges?WT.mc_id=Portal-Microsoft_Azure_Security\">Secure
+        href=\"https://learn.microsoft.com/azure/aks/api-server-authorized-ip-ranges?WT.mc_id=Portal-Microsoft_Azure_Security\">Secure
         access to the API server using authorized IP address ranges in Azure Kubernetes
         Service (AKS)</a>. If your existing cluster uses a Basic SKU Load Balancer,
         you''ll need to redeploy or migrate to a new AKS cluster using the Standard
-        SKU Load Balancer as explained in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/aks/load-balancer-standard#moving-from-a-basic-sku-load-balancer-to-standard-sku\">Moving
+        SKU Load Balancer as explained in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/aks/load-balancer-standard#moving-from-a-basic-sku-load-balancer-to-standard-sku\">Moving
         from a basic SKU load balancer to standard SKU</a>. If you decide not to redeploy,
         and you want to move these clusters to the ''not applicable'' tab, follow
-        the steps in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/exempt-resource#define-an-exemption?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Define
+        the steps in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/exempt-resource#define-an-exemption?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Define
         an exemption</a>.","categories":["Container"],"severity":"High","userImpact":"High","implementationEffort":"Low","threats":["AccountBreach","DenialOfService"],"publishDates":{"ga":"06/01/2021","public":"06/01/2021"},"tactics":["Discovery"],"techniques":["Container
         and Resource Discovery"],"cloudProviders":["Azure"]}},{"id":"/providers/Microsoft.Security/assessmentMetadata/b0fdc63a-38e7-4bab-a7c4-2c2665abbaa9","name":"b0fdc63a-38e7-4bab-a7c4-2c2665abbaa9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Role-Based
         Access Control should be used on Kubernetes Services","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","description":"To
         provide granular filtering on the actions that users can perform, use Role-Based
         Access Control (RBAC) to manage permissions in Kubernetes Service Clusters
         and configure relevant authorization policies. For more information, see <a
-        target=''_blank'' href=''https://docs.microsoft.com/azure/aks/concepts-identity#role-based-access-controls-rbac''>Azure
+        target=''_blank'' href=''https://learn.microsoft.com/azure/aks/concepts-identity#role-based-access-controls-rbac''>Azure
         role-based access control</a>.","remediationDescription":"To Use Role-Based
         Access Control (RBAC) you must recreate your Kubernetes Service cluster and
         enable RBAC during the creation process. Creating a Kubernetes Service with
@@ -36730,20 +36730,20 @@ interactions:
         extension for Azure Arc provides threat protection for your Arc-enabled Kubernetes
         clusters. The extension collects data from all control plane (master) nodes
         in the cluster and sends it to the Microsoft Defender for Kubernetes backend
-        in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation.","remediationDescription":"To
+        in the cloud for further analysis. Learn more in https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation.","remediationDescription":"To
         install the Defender extension on your Arc-enabled Kubernetes clusters, select
         an unhealthy cluster and select <b>Remediate</b>.<br>To manually deploy the
         extension with Azure Resource Manager, Azure CLI, or the REST API, see the
-        instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Microsoft
+        instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-azure-arc?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Microsoft
         Defender for Arc-enabled Kubernetes</a>.","categories":["Container"],"preview":true,"severity":"High","publishDates":{"public":"06/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/708b60a6-d253-4fe0-9114-4be4c00f012c"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/56a83a6e-c417-42ec-b567-1e6fcb3d09a9","name":"56a83a6e-c417-42ec-b567-1e6fcb3d09a9","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Azure
         Kubernetes Service clusters should have Defender profile enabled","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01","description":"Microsoft
         Defender for Containers provides cloud-native Kubernetes security capabilities
         including environment hardening, workload protection, and run-time protection.<br>
         When you enable the SecurityProfile.AzureDefender profile on your Azure Kubernetes
         Service cluster, an agent is deployed to your cluster to collect security
-        event data.<br>Learn more about [Microsoft Defender for Containers](https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks#architecture-overview).","remediationDescription":"To
+        event data.<br>Learn more about [Microsoft Defender for Containers](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-containers-introduction?tabs=defender-for-container-arch-aks#architecture-overview).","remediationDescription":"To
         enable the profile using Azure CLI, Azure Resource Manager, or the REST API,
-        follow the instructions in <a target=\"_blank\" href=\"https://docs.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Enable
+        follow the instructions in <a target=\"_blank\" href=\"https://learn.microsoft.com/azure/defender-for-cloud/defender-for-kubernetes-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation\">Enable
         the SecurityProfile.AzureDefender profile</a>.","categories":["Data"],"severity":"High","publishDates":{"ga":"07/01/2022","public":"12/01/2021"},"cloudProviders":["Azure"],"remediationPolicy":"/providers/Microsoft.Authorization/policyDefinitions/64def556-fbad-4622-930e-72d1d5589bf5"}},{"id":"/providers/Microsoft.Security/assessmentMetadata/ff87e0b4-17df-d338-5b19-80e71e0dcc9d","name":"ff87e0b4-17df-d338-5b19-80e71e0dcc9d","type":"Microsoft.Security/assessmentMetadata","properties":{"displayName":"Kubernetes
         clusters should not use the default namespace","assessmentType":"BuiltIn","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373","description":"Prevent
         usage of the default namespace in Kubernetes clusters to protect against unauthorized
diff --git a/src/azure-cli/azure/cli/command_modules/serviceconnector/_utils.py b/src/azure-cli/azure/cli/command_modules/serviceconnector/_utils.py
index 64dff24d87e..2e33d777ad8 100644
--- a/src/azure-cli/azure/cli/command_modules/serviceconnector/_utils.py
+++ b/src/azure-cli/azure/cli/command_modules/serviceconnector/_utils.py
@@ -284,7 +284,7 @@ def get_auth_if_no_valid_key_vault_connection(source_name, source_id, key_vault_
     return {'authType': 'systemAssignedIdentity'}
 
 
-# https://docs.microsoft.com/azure/app-service/app-service-key-vault-references
+# https://learn.microsoft.com/azure/app-service/app-service-key-vault-references
 def get_auth_if_no_valid_key_vault_connection_for_webapp(source_id, key_vault_connections):
 
     try:
diff --git a/src/azure-cli/azure/cli/command_modules/servicefabric/_params.py b/src/azure-cli/azure/cli/command_modules/servicefabric/_params.py
index 3d117bbce26..bd334e3e265 100644
--- a/src/azure-cli/azure/cli/command_modules/servicefabric/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/servicefabric/_params.py
@@ -312,7 +312,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-statements
         c.argument('primary', arg_type=get_three_state_flag(), help='Specify if the node type is primary. On this node type will run system services. Only one node type should be marked as primary. Primary node type cannot be deleted or changed for existing clusters.')
         c.argument('disk_size', type=int, options_list=['--disk-size', '--data-disk-size'], help='Disk size for each vm in the node type in GBs.', default=100)
         c.argument('disk_type', arg_type=get_enum_type(DiskType), options_list=['--disk-type', '--data-disk-type'],
-                   help='Managed data disk type. IOPS and throughput are given by the disk size, to see more information go to https://docs.microsoft.com/azure/virtual-machines/disks-types. Default StandardSSD_LRS'
+                   help='Managed data disk type. IOPS and throughput are given by the disk size, to see more information go to https://learn.microsoft.com/azure/virtual-machines/disks-types. Default StandardSSD_LRS'
                    'Standard_LRS: Standard HDD locally redundant storage. Best for backup, non-critical, and infrequent access.'
                    'StandardSSD_LRS: Standard SSD locally redundant storage. Best for web servers, lightly used enterprise applications and dev/test.'
                    'Premium_LRS: Premium SSD locally redundant storage. Best for production and performance sensitive workloads.')
@@ -348,7 +348,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-statements
 
     with self.argument_context('sf managed-node-type vm-secret') as c:
         c.argument('source_vault_id', help='Key Vault resource id containing the certificates.')
-        c.argument('certificate_url', help='This is the URL of a certificate that has been uploaded to Key Vault as a secret. For adding a secret to the Key Vault, see [Add a key or secret to the key vault](https://docs.microsoft.com/azure/key-vault/key-vault-get-started/#add). In this case, your certificate needs to be It is the Base64 encoding of the following JSON Object which is encoded in UTF-8: <br><br> {<br>  \"data\":\"<Base64-encoded-certificate>\",<br>  \"dataType\":\"pfx\",<br>  \"password\":\"<pfx-file-password>\"<br>}/')
+        c.argument('certificate_url', help='This is the URL of a certificate that has been uploaded to Key Vault as a secret. For adding a secret to the Key Vault, see [Add a key or secret to the key vault](https://learn.microsoft.com/azure/key-vault/key-vault-get-started/#add). In this case, your certificate needs to be It is the Base64 encoding of the following JSON Object which is encoded in UTF-8: <br><br> {<br>  \"data\":\"<Base64-encoded-certificate>\",<br>  \"dataType\":\"pfx\",<br>  \"password\":\"<pfx-file-password>\"<br>}/')
         c.argument('certificate_store', help='Specifies the certificate store on the Virtual Machine to which the certificate should be added. The specified certificate store is implicitly in the LocalMachine account.')
 
     # managed-application-type
diff --git a/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/public_ip/__cmd_group.py
index 569e6343494..2557faf7887 100644
--- a/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/public_ip/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/servicefabric/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/sql/_help.py b/src/azure-cli/azure/cli/command_modules/sql/_help.py
index 1846fa4663e..2f529c13a7a 100644
--- a/src/azure-cli/azure/cli/command_modules/sql/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/sql/_help.py
@@ -1754,7 +1754,7 @@
 
 helps['sql server tde-key set'] = """
 type: command
-short-summary: Sets the server's encryption protector. Ensure to create the key first https://docs.microsoft.com/en-us/cli/azure/sql/server/key?view=azure-cli-latest#az-sql-server-key-create
+short-summary: Sets the server's encryption protector. Ensure to create the key first https://learn.microsoft.com/en-us/cli/azure/sql/server/key?view=azure-cli-latest#az-sql-server-key-create
 """
 
 helps['sql server update'] = """
diff --git a/src/azure-cli/azure/cli/command_modules/sqlvm/_params.py b/src/azure-cli/azure/cli/command_modules/sqlvm/_params.py
index 42ffe0be923..32b220b0a9a 100644
--- a/src/azure-cli/azure/cli/command_modules/sqlvm/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/sqlvm/_params.py
@@ -121,7 +121,7 @@ def load_arguments(self, _):
         c.argument('availability_group_name',
                    options_list=['--ag-name', '-a'],
                    help='Name of the availability group. Please refer to '
-                   'https://docs.microsoft.com/sql/database-engine/availability-groups/windows/use-the-availability-group-wizard-sql-server-management-studio?view=sql-server-2017 '
+                   'https://learn.microsoft.com/sql/database-engine/availability-groups/windows/use-the-availability-group-wizard-sql-server-management-studio?view=sql-server-2017 '
                    'to create and availability group')
 
     with self.argument_context('sql vm group ag-listener', arg_group='Load Balancer Configuration') as c:
diff --git a/src/azure-cli/azure/cli/command_modules/storage/_help.py b/src/azure-cli/azure/cli/command_modules/storage/_help.py
index 2b89af401ed..b6a4085fd8a 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/storage/_help.py
@@ -85,7 +85,7 @@
     Sharing) rules.
 parameters:
   - name: --enable-change-feed
-    short-summary: 'Indicate whether change feed event logging is enabled. If it is true, you enable the storage account to begin capturing changes. The default value is true. You can see more details in https://docs.microsoft.com/azure/storage/blobs/storage-blob-change-feed?tabs=azure-portal#register-by-using-azure-cli'
+    short-summary: 'Indicate whether change feed event logging is enabled. If it is true, you enable the storage account to begin capturing changes. The default value is true. You can see more details in https://learn.microsoft.com/azure/storage/blobs/storage-blob-change-feed?tabs=azure-portal#register-by-using-azure-cli'
   - name: --enable-delete-retention
     short-summary: 'Indicate whether delete retention policy is enabled for the blob service.'
   - name: --delete-retention-days
@@ -229,7 +229,7 @@
 long-summary: |
     The failover occurs from the storage account's primary cluster to secondary cluster for (RA-)GRS/GZRS accounts. The secondary
     cluster will become primary after failover. For more information, please refer to
-    https://docs.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance.
+    https://learn.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance.
 examples:
   - name: Failover a storage account.
     text: |
@@ -2256,7 +2256,7 @@
         For example, the following ACL grants read, write, and execute rights to the file owner an
         john.doe@contoso, the read right to the owning group, and nothing to everyone else:
         "user::rwx,user:john.doe@contoso:rwx,group::r--,other::---,mask::rwx".
-        For more information, please refer to https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control.
+        For more information, please refer to https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control.
     - name: --permissions
       short-summary: >
         Invalid in conjunction with acl. POSIX access permissions for the file owner, the file owning group, and others.
@@ -2266,12 +2266,12 @@
       short-summary: >
         The owning user of the file or directory. The user Azure Active Directory object ID or user principal name to
         set as the owner. For more information, please refer to
-        https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#the-owning-user.
+        https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#the-owning-user.
     - name: --group
       short-summary: >
         The owning group of the file or directory. The group Azure Active Directory object ID or user principal name to
         set as the owning group. For more information, please refer to
-        https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#changing-the-owning-group.
+        https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#changing-the-owning-group.
 examples:
     - name: Set the access control list of a path.
       text: az storage fs access set --acl "user::rwx,group::r--,other::---" -p dir -f myfilesystem --account-name mystorageaccount --account-key 0000-0000
diff --git a/src/azure-cli/azure/cli/command_modules/storage/_params.py b/src/azure-cli/azure/cli/command_modules/storage/_params.py
index 244ef854244..813f2c691f6 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/storage/_params.py
@@ -150,7 +150,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
         help='When creating a file or directory and the parent folder does not have a default ACL, the umask restricts '
              'the permissions of the file or directory to be created. The resulting permission is given by p & ^u, '
              'where p is the permission and u is the umask. For more information, please refer to '
-             'https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#umask.')
+             'https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#umask.')
     permissions_type = CLIArgumentType(
         help='POSIX access permissions for the file owner, the file owning group, and others. Each class may be '
              'granted read (4), write (2), or execute (1) permission. Both symbolic (rwxrw-rw-) and 4-digit octal '
@@ -161,7 +161,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
              'indicates sticky bit not set. In 4-digit octal notation, its represented by 1st digit (e.g. 1766 '
              'represents rwxrw-rw- with sticky bit and 0766 represents rwxrw-rw- without sticky bit). For more '
              'information, please refer to '
-             'https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#levels-of-permission.')
+             'https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#levels-of-permission.')
 
     timeout_type = CLIArgumentType(
         help='Request timeout in seconds. Applies to each call to the service.', type=int
@@ -301,7 +301,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
     with self.argument_context('storage account blob-inventory-policy create') as c:
         c.argument('policy', type=file_type, completer=FilesCompleter(),
                    help='The Storage Account Blob Inventory Policy, string in JSON format or json file path. See more '
-                   'details in https://docs.microsoft.com/azure/storage/blobs/blob-inventory#inventory-policy.')
+                   'details in https://learn.microsoft.com/azure/storage/blobs/blob-inventory#inventory-policy.')
 
     with self.argument_context('storage account check-name') as c:
         c.argument('name', options_list=['--name', '-n'],
@@ -625,7 +625,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
     with self.argument_context('storage account management-policy create') as c:
         c.argument('policy', type=file_type, completer=FilesCompleter(),
                    help='The Storage Account ManagementPolicies Rules, in JSON format. See more details in: '
-                        'https://docs.microsoft.com/azure/storage/common/storage-lifecycle-managment-concepts.')
+                        'https://learn.microsoft.com/azure/storage/common/storage-lifecycle-managment-concepts.')
 
     for item in ['create', 'update', 'show', 'delete']:
         with self.argument_context('storage account management-policy {}'.format(item)) as c:
@@ -1275,7 +1275,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
                    help='The type of blob at the destination.')
         c.argument('preserve_s2s_access_tier', arg_group='Additional Flags', arg_type=get_three_state_flag(),
                    help='Preserve access tier during service to service copy. '
-                   'Please refer to https://docs.microsoft.com/azure/storage/blobs/storage-blob-storage-tiers '
+                   'Please refer to https://learn.microsoft.com/azure/storage/blobs/storage-blob-storage-tiers '
                    'to ensure destination storage account support setting access tier. In the cases that setting '
                    'access tier is not supported, please use `--preserve-s2s-access-tier false` to bypass copying '
                    'access tier. (Default true)')
@@ -1397,7 +1397,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
                 help='Required if the blob has an active lease.')
         c.argument('query_expression', help='The query expression in SQL. The maximum size of the query expression '
                    'is 256KiB. For more information about the expression syntax, please see '
-                   'https://docs.microsoft.com/azure/storage/blobs/query-acceleration-sql-reference')
+                   'https://learn.microsoft.com/azure/storage/blobs/query-acceleration-sql-reference')
         c.extra('input_format', arg_type=get_enum_type(['csv', 'json']), validator=validate_text_configuration,
                 help='Serialization type of the data currently stored in the blob. '
                 'The default is to treat the blob data as CSV data formatted in the default dialect.'
@@ -2675,7 +2675,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
             c.argument('acl', help='The value is a comma-separated list of access control entries. Each access control '
                        'entry (ACE) consists of a scope, a type, a user or group identifier, and permissions in the '
                        'format "[scope:][type]:[id]:[permissions]".  For more information, please refer to '
-                       'https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control.')
+                       'https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control.')
             c.extra('continuation',
                     help='Optional continuation token that can be used to resume previously stopped operation.')
             c.extra('batch_size', type=int, help='Optional. If data set size exceeds batch size then operation will '
diff --git a/src/azure-cli/azure/cli/command_modules/storage/_params_azure_stack.py b/src/azure-cli/azure/cli/command_modules/storage/_params_azure_stack.py
index c86e012cc75..7dd08e00eff 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/_params_azure_stack.py
+++ b/src/azure-cli/azure/cli/command_modules/storage/_params_azure_stack.py
@@ -136,12 +136,12 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
         help='When creating a file or directory and the parent folder does not have a default ACL, the umask restricts '
              'the permissions of the file or directory to be created. The resulting permission is given by p & ^u, '
              'where p is the permission and u is the umask. For more information, please refer to '
-             'https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#umask.')
+             'https://learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#umask.')
     permissions_type = CLIArgumentType(
         help='POSIX access permissions for the file owner, the file owning group, and others. Each class may be '
              'granted read, write, or execute permission. The sticky bit is also supported. Both symbolic (rwxrw-rw-) '
              'and 4-digit octal notation (e.g. 0766) are supported. For more information, please refer to https://'
-             'docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#levels-of-permission.')
+             'learn.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#levels-of-permission.')
 
     timeout_type = CLIArgumentType(
         help='Request timeout in seconds. Applies to each call to the service.', type=int
@@ -341,7 +341,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
     with self.argument_context('storage account management-policy create') as c:
         c.argument('policy', type=file_type, completer=FilesCompleter(),
                    help='The Storage Account ManagementPolicies Rules, in JSON format. See more details in: '
-                        'https://docs.microsoft.com/azure/storage/common/storage-lifecycle-managment-concepts.')
+                        'https://learn.microsoft.com/azure/storage/common/storage-lifecycle-managment-concepts.')
 
     for item in ['create', 'update', 'show', 'delete']:
         with self.argument_context('storage account management-policy {}'.format(item)) as c:
@@ -624,7 +624,7 @@ def load_arguments(self, _):  # pylint: disable=too-many-locals, too-many-statem
                    help='The type of blob at the destination.')
         c.argument('preserve_s2s_access_tier', arg_group='Additional Flags', arg_type=get_three_state_flag(),
                    help='Preserve access tier during service to service copy. '
-                   'Please refer to https://docs.microsoft.com/azure/storage/blobs/storage-blob-storage-tiers '
+                   'Please refer to https://learn.microsoft.com/azure/storage/blobs/storage-blob-storage-tiers '
                    'to ensure destination storage account support setting access tier. In the cases that setting '
                    'access tier is not supported, please use `--preserve-s2s-access-tier false` to bypass copying '
                    'access tier. (Default true)')
diff --git a/src/azure-cli/azure/cli/command_modules/storage/_validators.py b/src/azure-cli/azure/cli/command_modules/storage/_validators.py
index ff681195ceb..e56abdce380 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/_validators.py
+++ b/src/azure-cli/azure/cli/command_modules/storage/_validators.py
@@ -202,7 +202,7 @@ def validate_client_parameters(cmd, namespace):
         if 'auth_mode' in cmd.arguments:
             message += """
 You also can add `--auth-mode login` in your command to use Azure Active Directory (Azure AD) for authorization if your login account is assigned required RBAC roles.
-For more information about RBAC roles in storage, visit https://docs.microsoft.com/azure/storage/common/storage-auth-aad-rbac-cli.
+For more information about RBAC roles in storage, visit https://learn.microsoft.com/azure/storage/common/storage-auth-aad-rbac-cli.
 """
         logger.warning('%s\nIn addition, setting the corresponding environment variables can avoid inputting '
                        'credentials in your command. Please use --help to get more information about environment '
@@ -221,7 +221,7 @@ def validate_client_parameters(cmd, namespace):
         if 'auth_mode' in cmd.arguments:
             message += """
 You also can add `--auth-mode login` in your command to use Azure Active Directory (Azure AD) for authorization if your login account is assigned required RBAC roles.
-For more information about RBAC roles in storage, visit https://docs.microsoft.com/azure/storage/common/storage-auth-aad-rbac-cli."
+For more information about RBAC roles in storage, visit https://learn.microsoft.com/azure/storage/common/storage-auth-aad-rbac-cli."
             """
         from azure.cli.core.azclierror import InvalidArgumentValueError
         raise InvalidArgumentValueError(message)
@@ -1899,7 +1899,7 @@ def validate_logging_version(namespace):
     if validate_service_type(namespace.services, 'table') and namespace.version and namespace.version != 1.0:
         raise CLIError(
             'incorrect usage: for table service, the supported version for logging is `1.0`. For more information, '
-            'please refer to https://docs.microsoft.com/rest/api/storageservices/storage-analytics-log-format.')
+            'please refer to https://learn.microsoft.com/rest/api/storageservices/storage-analytics-log-format.')
 
 
 def validate_match_condition(namespace):
diff --git a/src/azure-cli/azure/cli/command_modules/storage/_validators_azure_stack.py b/src/azure-cli/azure/cli/command_modules/storage/_validators_azure_stack.py
index 417e1bbd642..0871099adfe 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/_validators_azure_stack.py
+++ b/src/azure-cli/azure/cli/command_modules/storage/_validators_azure_stack.py
@@ -173,7 +173,7 @@ def validate_client_parameters(cmd, namespace):
                        '--account-key or --sas-token as credentials, or use `--auth-mode login` if you '
                        'have required RBAC roles in your command. For more information about RBAC roles '
                        'in storage, visit '
-                       'https://docs.microsoft.com/azure/storage/common/storage-auth-aad-rbac-cli. \n'
+                       'https://learn.microsoft.com/azure/storage/common/storage-auth-aad-rbac-cli. \n'
                        'Setting the corresponding environment variables can avoid inputting credentials in '
                        'your command. Please use --help to get more information.')
         n.account_key = _query_account_key(cmd.cli_ctx, n.account_name)
@@ -1292,4 +1292,4 @@ def validate_logging_version(namespace):
     if validate_service_type(namespace.services, 'table') and namespace.version != 1.0:
         raise CLIError(
             'incorrect usage: for table service, the supported version for logging is `1.0`. For more information, '
-            'please refer to https://docs.microsoft.com/rest/api/storageservices/storage-analytics-log-format.')
+            'please refer to https://learn.microsoft.com/rest/api/storageservices/storage-analytics-log-format.')
diff --git a/src/azure-cli/azure/cli/command_modules/storage/azcopy/util.py b/src/azure-cli/azure/cli/command_modules/storage/azcopy/util.py
index 2866d49e972..69dafa0106d 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/azcopy/util.py
+++ b/src/azure-cli/azure/cli/command_modules/storage/azcopy/util.py
@@ -214,7 +214,7 @@ def _get_default_install_location():
     else:
         raise CLIError('The {} platform is not currently supported. If you want to know which platforms are supported, '
                        'please refer to the document for supported platforms: '
-                       'https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#download-azcopy'
+                       'https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#download-azcopy'
                        .format(system))
     return install_location
 
diff --git a/src/azure-cli/azure/cli/command_modules/storage/docs/ADLS Gen2.md b/src/azure-cli/azure/cli/command_modules/storage/docs/ADLS Gen2.md
index c62ab3e5058..e2b18e12987 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/docs/ADLS Gen2.md	
+++ b/src/azure-cli/azure/cli/command_modules/storage/docs/ADLS Gen2.md	
@@ -1,7 +1,7 @@
 ## Azure Data Lake Storage Gen2
 
 Azure Data Lake Storage Gen2 is a set of capabilities dedicated to big data analytics, built on Azure Blob storage. For more information, please refer to
-https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-introduction?toc=/azure/storage/blobs/toc.json.
+https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-introduction?toc=/azure/storage/blobs/toc.json.
 
 ### Included Features
 
@@ -76,7 +76,7 @@ For more specific examples, use: az find "az storage fs"
 
     4. Using account name and Azure AD credentials
 
-        Azure CLI commands for data operations against Blob storage support the `--auth-mode` parameter, which enables you to specify how to authorize a given operation. Set the `--auth-mode` parameter to login to authorize with Azure AD credentials. For more information, see [Authorize access to blob or queue data with Azure CLI](https://docs.microsoft.com/en-us/azure/storage/common/authorize-data-operations-cli?toc=/azure/storage/blobs/toc.json).
+        Azure CLI commands for data operations against Blob storage support the `--auth-mode` parameter, which enables you to specify how to authorize a given operation. Set the `--auth-mode` parameter to login to authorize with Azure AD credentials. For more information, see [Authorize access to blob or queue data with Azure CLI](https://learn.microsoft.com/en-us/azure/storage/common/authorize-data-operations-cli?toc=/azure/storage/blobs/toc.json).
 
         - Specify `--account-name` and `--auth-mode login` parameter in your command
             ```
diff --git a/src/azure-cli/azure/cli/command_modules/storage/docs/Storage Encryption.md b/src/azure-cli/azure/cli/command_modules/storage/docs/Storage Encryption.md
index 19d47a4b316..54ac1bb062b 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/docs/Storage Encryption.md	
+++ b/src/azure-cli/azure/cli/command_modules/storage/docs/Storage Encryption.md	
@@ -1,11 +1,11 @@
 ## Azure Storage Encryption
 Azure Storage automatically encrypts your data when it is persisted it to the cloud. Azure Storage encryption protects your data and to help you to meet your organizational security and compliance commitments. 
 See more in
-https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption?toc=/azure/storage/blobs/toc.json
+https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption?toc=/azure/storage/blobs/toc.json
 
 ### How to use ###
 Install Azure CLI in one of the following ways:
-1. [Public Released Azure CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli)
+1. [Public Released Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli)
 2. [Try Features before Release](https://github.com/Azure/azure-cli/blob/dev/doc/try_new_features_before_release.md)
 
 ### Included Features
diff --git a/src/azure-cli/azure/cli/command_modules/storage/readme.md b/src/azure-cli/azure/cli/command_modules/storage/readme.md
index e49b43f1153..1d626d06303 100644
--- a/src/azure-cli/azure/cli/command_modules/storage/readme.md
+++ b/src/azure-cli/azure/cli/command_modules/storage/readme.md
@@ -4,7 +4,7 @@ This is a main module for storage features.
 ### Included Features
 
 #### Management Policy:	
-Manage data policy rules associated with a storage account: [more info](https://docs.microsoft.com/azure/storage/common/storage-lifecycle-managment-concepts)\	
+Manage data policy rules associated with a storage account: [more info](https://learn.microsoft.com/azure/storage/common/storage-lifecycle-managment-concepts)\	
 *Examples:*	
 ```	
 az storage account management-policy create \	
@@ -14,7 +14,7 @@ az storage account management-policy create \
 ```	
 
 #### Static Website:	
-Manage static website configurations: [more info](https://docs.microsoft.com/azure/storage/blobs/storage-blob-static-website)\	
+Manage static website configurations: [more info](https://learn.microsoft.com/azure/storage/blobs/storage-blob-static-website)\	
 *Examples:*	
 ```	
 az storage blob service-properties update \	
@@ -25,7 +25,7 @@ az storage blob service-properties update \
 ```	
 
 #### Hierarchical Namespace:	
-Enable the blob service to exhibit filesystem semantics: [more info](https://docs.microsoft.com/azure/storage/data-lake-storage/namespace)\	
+Enable the blob service to exhibit filesystem semantics: [more info](https://learn.microsoft.com/azure/storage/data-lake-storage/namespace)\	
 *Examples:*	
 ```	
 az storage account create \	
@@ -36,7 +36,7 @@ az storage account create \
 ```	
 
 #### File AAD Integration:	
-Enable AAD integration for Azure files, which will support SMB access: [more info](https://docs.microsoft.com/azure/storage/files/storage-files-active-directory-enable)\	
+Enable AAD integration for Azure files, which will support SMB access: [more info](https://learn.microsoft.com/azure/storage/files/storage-files-active-directory-enable)\	
 *Examples:*	
 ```	
 az storage account create \	
@@ -50,7 +50,7 @@ az storage account update \
 
 #### Premium Blobs/Files:	
 Create premium blob/file storage accounts.\	
-More info:[premium blobs](https://azure.microsoft.com/blog/introducing-azure-premium-blob-storage-limited-public-preview/) [premium files](https://docs.microsoft.com/azure/storage/files/storage-files-introduction)\	
+More info:[premium blobs](https://azure.microsoft.com/blog/introducing-azure-premium-blob-storage-limited-public-preview/) [premium files](https://learn.microsoft.com/azure/storage/files/storage-files-introduction)\	
 *Examples:*	
 ```	
 az storage account create \	
@@ -66,7 +66,7 @@ az storage account create \
 ```	
 
 #### Customer-Controlled Failover:	
-Failover GRS/RA-GRS storage accounts from the primary cluster to the secondary cluster: [more info](https://docs.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance)\	
+Failover GRS/RA-GRS storage accounts from the primary cluster to the secondary cluster: [more info](https://learn.microsoft.com/azure/storage/common/storage-disaster-recovery-guidance)\	
 *Examples:*	
 ```	
 az storage account show \	
diff --git a/src/azure-cli/azure/cli/command_modules/util/custom.py b/src/azure-cli/azure/cli/command_modules/util/custom.py
index eb3c67b9c4f..eb5a79ace5b 100644
--- a/src/azure-cli/azure/cli/command_modules/util/custom.py
+++ b/src/azure-cli/azure/cli/command_modules/util/custom.py
@@ -73,7 +73,7 @@ def upgrade_version(cmd, update_all=None, yes=None, allow_preview=None):  # pyli
         logger.warning("Your current Azure CLI version is %s. %s", local_version, latest_version_msg)
         from knack.prompting import prompt_y_n, NoTTYException
         if not yes:
-            logger.warning("Please check the release notes first: https://docs.microsoft.com/"
+            logger.warning("Please check the release notes first: https://learn.microsoft.com/"
                            "cli/azure/release-notes-azure-cli")
             try:
                 confirmation = prompt_y_n("Do you want to continue?", default='y')
@@ -191,7 +191,7 @@ def upgrade_version(cmd, update_all=None, yes=None, allow_preview=None):  # pyli
             msg = "Extension {} update failed during az upgrade. {}".format(ext_name, str(ex))
             raise CLIError(msg)
     auto_upgrade_msg = "You can enable auto-upgrade with 'az config set auto-upgrade.enable=yes'. " \
-        "More details in https://docs.microsoft.com/cli/azure/update-azure-cli#automatic-update"
+        "More details in https://learn.microsoft.com/cli/azure/update-azure-cli#automatic-update"
     logger.warning("Upgrade finished.%s", "" if cmd.cli_ctx.config.getboolean('auto-upgrade', 'enable', False)
                    else auto_upgrade_msg)
 
@@ -319,7 +319,7 @@ def demo_style(cmd, theme=None):  # pylint: disable=unused-argument
         (Style.ACTION, "--resource-group"),
         (Style.PRIMARY, " MyResourceGroup\n"),
         (Style.SECONDARY, "Create a storage account. For more detail, see "),
-        (Style.HYPERLINK, "https://docs.microsoft.com/azure/storage/common/storage-account-create?"
+        (Style.HYPERLINK, "https://learn.microsoft.com/azure/storage/common/storage-account-create?"
                           "tabs=azure-cli#create-a-storage-account-1"),
         (Style.SECONDARY, "\n"),
     ]
diff --git a/src/azure-cli/azure/cli/command_modules/util/tests/latest/test_rest.py b/src/azure-cli/azure/cli/command_modules/util/tests/latest/test_rest.py
index 61b03658227..946d5924346 100644
--- a/src/azure-cli/azure/cli/command_modules/util/tests/latest/test_rest.py
+++ b/src/azure-cli/azure/cli/command_modules/util/tests/latest/test_rest.py
@@ -22,28 +22,28 @@ def test_rest_arm(self):
         })
 
         # Test ARM Subscriptions - List
-        # https://docs.microsoft.com/en-us/rest/api/resources/subscriptions/list
+        # https://learn.microsoft.com/en-us/rest/api/resources/subscriptions/list
         self.cmd('az rest -u /subscriptions?api-version=2020-01-01',
                  checks=[self.exists("value")])
 
         # Test ARM Tenants - List
-        # https://docs.microsoft.com/en-us/rest/api/resources/tenants/list
+        # https://learn.microsoft.com/en-us/rest/api/resources/tenants/list
         self.cmd('az rest -u /tenants?api-version=2020-01-01',
                  checks=[self.exists("value")])
 
         # Resource Groups - Create Or Update
-        # https://docs.microsoft.com/en-us/rest/api/resources/resourcegroups/createorupdate
+        # https://learn.microsoft.com/en-us/rest/api/resources/resourcegroups/createorupdate
         self.cmd('az rest -m PUT -u https://management.azure.com/subscriptions/{{subscriptionId}}/resourcegroups/{rg}?api-version=2019-10-01 '
                  '--body \'{{"location": "eastus"}}\'',
                  checks=[self.check("name", '{rg}')])
 
         # Resource Groups - Get
-        # https://docs.microsoft.com/en-us/rest/api/resources/resourcegroups/get
+        # https://learn.microsoft.com/en-us/rest/api/resources/resourcegroups/get
         self.cmd('az rest -u https://management.azure.com/subscriptions/{{subscriptionId}}/resourcegroups/{rg}?api-version=2019-10-01',
                  checks=[self.check("name", '{rg}')])
 
         # Resource Groups - Delete
-        # https://docs.microsoft.com/en-us/rest/api/resources/resourcegroups/delete
+        # https://learn.microsoft.com/en-us/rest/api/resources/resourcegroups/delete
         self.cmd('az rest -m DELETE -u https://management.azure.com/subscriptions/{{subscriptionId}}/resourcegroups/{rg}?api-version=2019-10-01',
                  checks=[])
 
@@ -68,7 +68,7 @@ def test_rest_storage(self, resource_group):
         })
 
         # Create a storage account
-        # https://docs.microsoft.com/en-us/rest/api/storagerp/storageaccounts/create
+        # https://learn.microsoft.com/en-us/rest/api/storagerp/storageaccounts/create
         self.cmd('az rest -m PUT -u /subscriptions/{{subscriptionId}}/resourceGroups/{rg}/providers/Microsoft.Storage/storageAccounts/{sa}?api-version=2019-06-01 '
                  '-b @"{storage_account_create_body}"')
 
@@ -77,54 +77,54 @@ def test_rest_storage(self, resource_group):
         while state != 'Succeeded':
             time.sleep(5)
             # Show the storage account
-            # https://docs.microsoft.com/en-us/rest/api/storagerp/storageaccounts/getproperties
+            # https://learn.microsoft.com/en-us/rest/api/storagerp/storageaccounts/getproperties
             state = self.cmd('az rest -m GET -u /subscriptions/{{subscriptionId}}/resourceGroups/{rg}/providers/Microsoft.Storage/storageAccounts/{sa}?api-version=2019-06-01') \
                 .get_output_in_json()["properties"]["provisioningState"]
 
-        # Create an account SAS token https://docs.microsoft.com/en-us/rest/api/storageservices/create-account-sas
-        # https://docs.microsoft.com/en-us/rest/api/storagerp/storageaccounts/listaccountsas
+        # Create an account SAS token https://learn.microsoft.com/en-us/rest/api/storageservices/create-account-sas
+        # https://learn.microsoft.com/en-us/rest/api/storagerp/storageaccounts/listaccountsas
         sas_token = self.cmd('az rest -m POST -u "/subscriptions/{{subscriptionId}}/resourceGroups/{rg}/providers/Microsoft.Storage/storageAccounts/{sa}/ListAccountSas?api-version=2019-06-01" '
                              '-b @"{storage_account_sas_body}"').get_output_in_json()["accountSasToken"]
 
         # Create a container with the SAS token
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/create-container
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/create-container
         self.cmd('az rest -m PUT -u https://{sa}.blob.core.windows.net/mycontainer?restype=container&' + sas_token + ' '
                  '--skip-authorization-header')
 
         # Show the container properties
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/get-container-properties
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/get-container-properties
         self.cmd('az rest -m HEAD -u https://{sa}.blob.core.windows.net/mycontainer?restype=container&' + sas_token + ' '
                  '--skip-authorization-header')
 
         # Create a blob
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/put-blob
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/put-blob
         self.cmd('az rest -m PUT -u https://{sa}.blob.core.windows.net/mycontainer/myblob?' + sas_token + ' '
                  '--headers "Content-Type=text/plain; charset=UTF-8" "x-ms-blob-type=BlockBlob" '
                  '--skip-authorization-header '
                  '--body "hello world"')
 
         # Show the blob
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/get-blob
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/get-blob
         self.cmd('az rest -m GET -u https://{sa}.blob.core.windows.net/mycontainer/myblob?' + sas_token + ' '
                  '--skip-authorization-header')
 
         # List blobs in the container
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/list-blobs
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/list-blobs
         self.cmd('az rest -m GET -u https://{sa}.blob.core.windows.net/mycontainer?restype=container&comp=list&' + sas_token + ' '
                  '--skip-authorization-header')
 
         # Delete the blob
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/delete-blob
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/delete-blob
         self.cmd('az rest -m DELETE -u https://{sa}.blob.core.windows.net/mycontainer/myblob?' + sas_token + ' '
                  '--skip-authorization-header')
 
         # Delete the container
-        # https://docs.microsoft.com/en-us/rest/api/storageservices/delete-container
+        # https://learn.microsoft.com/en-us/rest/api/storageservices/delete-container
         self.cmd('az rest -m DELETE -u https://{sa}.blob.core.windows.net/mycontainer?restype=container&' + sas_token + ' '
                  '--skip-authorization-header')
 
         # Delete the storage account
-        # https://docs.microsoft.com/en-us/rest/api/storagerp/storageaccounts/delete
+        # https://learn.microsoft.com/en-us/rest/api/storagerp/storageaccounts/delete
         self.cmd('az rest -m DELETE -u "/subscriptions/{{subscriptionId}}/resourceGroups/{rg}/providers/Microsoft.Storage/storageAccounts/{sa}?api-version=2019-06-01"')
 
     def test_rest_microsoft_graph(self):
@@ -137,7 +137,7 @@ def test_rest_microsoft_graph(self):
         })
 
         # Create application
-        # https://docs.microsoft.com/en-us/graph/api/application-post-applications?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/application-post-applications?view=graph-rest-1.0&tabs=http
         # Escape single quotes for `shlex` and curly braces for `format`
         app = self.cmd('az rest --method POST --url https://graph.microsoft.com/v1.0/applications --body \'{{"displayName": "{display_name}"}}\'',
                        checks=[
@@ -148,51 +148,51 @@ def test_rest_microsoft_graph(self):
         self.kwargs["app_id"] = app["appId"]
 
         # Get application
-        # https://docs.microsoft.com/en-us/graph/api/application-get?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/application-get?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method GET --url https://graph.microsoft.com/v1.0/applications/{app_object_id}',
                  checks=[self.check('displayName', '{display_name}')])
 
         # Update application
-        # https://docs.microsoft.com/en-us/graph/api/application-update?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/application-update?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method PATCH --url https://graph.microsoft.com/v1.0/applications/{app_object_id} --body \'{{"web":{{"redirectUris":["https://myapp.com"]}}}}\'')
 
         # application: addPassword
-        # https://docs.microsoft.com/en-us/graph/api/application-addpassword?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/application-addpassword?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method POST --url https://graph.microsoft.com/v1.0/applications/{app_object_id}/addPassword '
                  '--body \'{{"passwordCredential": {{"displayName": "Password friendly name"}}}}\'',
                  checks=[self.check('displayName', "Password friendly name")])
 
         # Create servicePrincipal
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-post-serviceprincipals?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-post-serviceprincipals?view=graph-rest-1.0&tabs=http
         sp = self.cmd('az rest --method POST --url https://graph.microsoft.com/v1.0/serviceprincipals --body \'{{"appId": "{app_id}"}}\'').get_output_in_json()
         self.kwargs["sp_object_id"] = sp["id"]
 
         # Get servicePrincipal
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-get?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-get?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method GET --url https://graph.microsoft.com/v1.0/servicePrincipals/{sp_object_id}',
                  checks=[self.check('appId', '{app_id}'),
                          self.check('id', '{sp_object_id}')])
 
         # Update servicePrincipal
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-update?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-update?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method PATCH --url https://graph.microsoft.com/v1.0/servicePrincipals/{sp_object_id} '
                  '--body \'{{"appRoleAssignmentRequired": true}}\'')
 
         # servicePrincipal: addPassword
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-addpassword?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-addpassword?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method POST --url https://graph.microsoft.com/v1.0/servicePrincipals/{sp_object_id}/addPassword '
                  '--body \'{{"passwordCredential": {{"displayName": "Password friendly name"}}}}\'',
                  checks=[self.check('displayName', "Password friendly name")])
 
         # Delete servicePrincipal
-        # https://docs.microsoft.com/en-us/graph/api/serviceprincipal-delete?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/serviceprincipal-delete?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method DELETE --url https://graph.microsoft.com/v1.0/serviceprincipals/{sp_object_id}')
 
         with self.assertRaisesRegex(CLIError, "Request_ResourceNotFound"):
             self.cmd('az rest --method GET --url https://graph.microsoft.com/v1.0/servicePrincipals/{sp_object_id}')
 
         # Delete application
-        # https://docs.microsoft.com/en-us/graph/api/application-delete?view=graph-rest-1.0&tabs=http
+        # https://learn.microsoft.com/en-us/graph/api/application-delete?view=graph-rest-1.0&tabs=http
         self.cmd('az rest --method DELETE --url https://graph.microsoft.com/v1.0/applications/{app_object_id}')
 
         with self.assertRaisesRegex(CLIError, "Request_ResourceNotFound"):
diff --git a/src/azure-cli/azure/cli/command_modules/vm/_arg_client.py b/src/azure-cli/azure/cli/command_modules/vm/_arg_client.py
index 4ea9774e573..7a8d47485ff 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/_arg_client.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/_arg_client.py
@@ -12,7 +12,7 @@
 class ARGClient:  # pylint: disable=too-few-public-methods
     """A lightweight Microsoft ARG API client.
 
-    For what ARG is, please see https://docs.microsoft.com/en-us/azure/governance/resource-graph/overview for details.
+    For what ARG is, please see https://learn.microsoft.com/en-us/azure/governance/resource-graph/overview for details.
     The reason for directly using this client to request REST is that ARG API does not return "nextLink" data,
     so the Python SDK "azure-mgmt-resourcegraph" cannot support paging
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/_help.py b/src/azure-cli/azure/cli/command_modules/vm/_help.py
index 72e4f6c18c2..23cabf18982 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/_help.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/_help.py
@@ -1402,7 +1402,7 @@
 helps['vm availability-set create'] = """
 type: command
 short-summary: Create an Azure Availability Set.
-long-summary: 'For more information, see https://docs.microsoft.com/azure/virtual-machines/availability.'
+long-summary: 'For more information, see https://learn.microsoft.com/azure/virtual-machines/availability.'
 examples:
   - name: Create an availability set.
     text: az vm availability-set create -n MyAvSet -g MyResourceGroup --platform-fault-domain-count 2 --platform-update-domain-count 2
@@ -1493,7 +1493,7 @@
 helps['vm capture'] = """
 type: command
 short-summary: Capture information for a stopped VM.
-long-summary: 'For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image'
+long-summary: 'For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image'
 parameters:
   - name: --vhd-name-prefix
     type: string
@@ -1520,14 +1520,14 @@
 helps['vm create'] = """
 type: command
 short-summary: Create an Azure Virtual Machine.
-long-summary: 'For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/quick-create-cli.'
+long-summary: 'For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/quick-create-cli.'
 parameters:
   - name: --image
     type: string
     short-summary: >
         The name of the operating system image as a URN alias, URN, custom image name or ID, custom image version ID, or VHD blob URI. In addition, it also supports shared gallery image.
         Please use the image alias including the version of the distribution you want to use. For example: please use Debian11 instead of Debian.'
-        This parameter is required unless using `--attach-os-disk.` Valid URN format: "Publisher:Offer:Sku:Version". For more information, see https://docs.microsoft.com/azure/virtual-machines/linux/cli-ps-findimage
+        This parameter is required unless using `--attach-os-disk.` Valid URN format: "Publisher:Offer:Sku:Version". For more information, see https://learn.microsoft.com/azure/virtual-machines/linux/cli-ps-findimage
     populator-commands:
       - az vm image list
       - az vm image show
@@ -1567,7 +1567,7 @@
   - name: Create a VM by attaching to an unmanaged operating system disk from a VHD blob uri.
     text: >
         az vm create -g MyResourceGroup -n MyVm --attach-os-disk https://vhd1234.blob.core.windows.net/vhds/osdisk1234.vhd --os-type linux --use-unmanaged-disk
-  - name: 'Create an Debian11 VM using a cloud-init script for configuration. See: https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init.'
+  - name: 'Create an Debian11 VM using a cloud-init script for configuration. See: https://learn.microsoft.com/azure/virtual-machines/linux/using-cloud-init.'
     text: >
         az vm create -g MyResourceGroup -n MyVm --image Debian11 --custom-data MyCloudInitScript.yml
   - name: Create a Debian11 VM with SSH key authentication and a public DNS entry, located on an existing virtual network and availability set.
@@ -1730,11 +1730,11 @@
 
     For more information, see:
 
-    - Azure Disks - https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview.
+    - Azure Disks - https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview.
 
     - Larger Managed Disks in Public Preview - https://azure.microsoft.com/blog/introducing-the-public-preview-of-larger-managed-disks-sizes/
 
-    - Ultra SSD Managed Disks in Public Preview - https://docs.microsoft.com/azure/virtual-machines/disks-types
+    - Ultra SSD Managed Disks in Public Preview - https://learn.microsoft.com/azure/virtual-machines/disks-types
 
 
 """
@@ -1773,7 +1773,7 @@
 short-summary: "Manage encryption of VM disks."
 long-summary: |
     For more information, see:
-    https://docs.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss
+    https://learn.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss
 """
 
 helps['vm encryption disable'] = """
@@ -1795,7 +1795,7 @@
 long-summary: |
     Note that Azure Active Directory / service principal arguments are unnecessary for vm encryption. The older version of Azure Disk Encryption required AAD arguments.
     For more information, see:
-    https://docs.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss
+    https://learn.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss
 parameters:
   - name: --aad-client-id
     short-summary: Client ID of an AAD app with permissions to write secrets to the key vault.
@@ -2170,7 +2170,7 @@
 helps['vm list'] = """
 type: command
 short-summary: List details of Virtual Machines.
-long-summary: '`--resource-group` can pass in an empty string as a parameter, which will output all VM information under the subscription. For more information on querying information about Virtual Machines, see https://docs.microsoft.com/cli/azure/query-az-cli2'
+long-summary: '`--resource-group` can pass in an empty string as a parameter, which will output all VM information under the subscription. For more information on querying information about Virtual Machines, see https://learn.microsoft.com/cli/azure/query-az-cli2'
 examples:
   - name: List all VMs.
     text: az vm list
@@ -2220,7 +2220,7 @@
 short-summary: Manage network interfaces. See also `az network nic`.
 long-summary: >
     A network interface (NIC) is the interconnection between a VM and the underlying software
-    network. For more information, see https://docs.microsoft.com/azure/virtual-network/virtual-network-network-interface-overview.
+    network. For more information, see https://learn.microsoft.com/azure/virtual-network/virtual-network-network-interface-overview.
 """
 
 helps['vm nic add'] = """
@@ -2322,7 +2322,7 @@
 helps['vm run-command'] = """
 type: group
 short-summary: Manage run commands on a Virtual Machine.
-long-summary: 'For more information, see https://docs.microsoft.com/azure/virtual-machines/windows/run-command or https://docs.microsoft.com/azure/virtual-machines/linux/run-command.'
+long-summary: 'For more information, see https://learn.microsoft.com/azure/virtual-machines/windows/run-command or https://learn.microsoft.com/azure/virtual-machines/linux/run-command.'
 """
 
 helps['vm run-command invoke'] = """
@@ -2480,7 +2480,7 @@
 helps['vm secret add'] = """
 type: command
 short-summary: Add a secret to a VM.
-long-summary: 'To install certificates on a virtual machine it is recommended to use the [Azure Key Vault virtual machine extension for Linux](https://docs.microsoft.com/azure/virtual-machines/extensions/key-vault-linux) or the [Azure Key Vault virtual machine extension for Windows](https://docs.microsoft.com/azure/virtual-machines/extensions/key-vault-windows) instead of `az vm secret add`.'
+long-summary: 'To install certificates on a virtual machine it is recommended to use the [Azure Key Vault virtual machine extension for Linux](https://learn.microsoft.com/azure/virtual-machines/extensions/key-vault-linux) or the [Azure Key Vault virtual machine extension for Windows](https://learn.microsoft.com/azure/virtual-machines/extensions/key-vault-windows) instead of `az vm secret add`.'
 examples:
   - name: Add a secret to a VM. (autogenerated)
     text: |
@@ -2569,11 +2569,11 @@
 
     For more information, see:
 
-    - Azure Disks - https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview.
+    - Azure Disks - https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview.
 
     - Larger Managed Disks in Public Preview - https://azure.microsoft.com/blog/introducing-the-public-preview-of-larger-managed-disks-sizes/
 
-    - Ultra SSD Managed Disks in Public Preview - https://docs.microsoft.com/azure/virtual-machines/disks-types
+    - Ultra SSD Managed Disks in Public Preview - https://learn.microsoft.com/azure/virtual-machines/disks-types
 
 
 """
@@ -2715,14 +2715,14 @@
 helps['vmss create'] = """
 type: command
 short-summary: Create an Azure Virtual Machine Scale Set.
-long-summary: 'For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-linux-create-cli.'
+long-summary: 'For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-linux-create-cli.'
 parameters:
   - name: --image
     type: string
     short-summary: >
         The name of the operating system image as a URN alias, URN, custom image name or ID, or VHD blob URI. In addition, it also supports shared gallery image.
         Please use the image alias including the version of the distribution you want to use. For example: please use Debian11 instead of Debian.'
-        This parameter is required unless using `--attach-os-disk.` Valid URN format: "Publisher:Offer:Sku:Version". For more information, see https://docs.microsoft.com/azure/virtual-machines/linux/cli-ps-findimage
+        This parameter is required unless using `--attach-os-disk.` Valid URN format: "Publisher:Offer:Sku:Version". For more information, see https://learn.microsoft.com/azure/virtual-machines/linux/cli-ps-findimage
     populator-commands:
       - az vm image list
       - az vm image show
@@ -2745,7 +2745,7 @@
     text: >
         az vmss create -n MyVmss -g MyResourceGroup --image CentOS85Gen2 \\
             --public-ip-per-vm --vm-domain-name myvmss --dns-servers 10.0.0.6 10.0.0.5
-  - name: 'Create a Linux VM scale set using a cloud-init script for configuration. See: https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init'
+  - name: 'Create a Linux VM scale set using a cloud-init script for configuration. See: https://learn.microsoft.com/azure/virtual-machines/linux/using-cloud-init'
     text: >
         az vmss create -g MyResourceGroup -n MyVmss --image Debian11 --custom-data MyCloudInitScript.yml
   - name: Create a VMSS from a generalized gallery image version.
@@ -2873,7 +2873,7 @@
 helps['vmss encryption'] = """
 type: group
 short-summary: "Manage encryption of VMSS."
-long-summary: "For more information, see: ttps://docs.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss"
+long-summary: "For more information, see: ttps://learn.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss"
 """
 
 helps['vmss encryption disable'] = """
@@ -2888,7 +2888,7 @@
 helps['vmss encryption enable'] = """
 type: command
 short-summary: "Encrypt a VMSS with managed disks."
-long-summary: "For more information, see: For more information, see: ttps://docs.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss"
+long-summary: "For more information, see: For more information, see: ttps://learn.microsoft.com/azure/security/fundamentals/azure-disk-encryption-vms-vmss"
 examples:
   - name: encrypt a VM scale set using a key vault in the same resource group
     text: >
@@ -3124,7 +3124,7 @@
 helps['vmss run-command'] = """
 type: group
 short-summary: Manage run commands on a Virtual Machine Scale Set.
-long-summary: 'For more information, see https://docs.microsoft.com/azure/virtual-machines/windows/run-command or https://docs.microsoft.com/azure/virtual-machines/linux/run-command.'
+long-summary: 'For more information, see https://learn.microsoft.com/azure/virtual-machines/windows/run-command or https://learn.microsoft.com/azure/virtual-machines/linux/run-command.'
 """
 
 helps['vmss run-command invoke'] = """
@@ -3397,7 +3397,7 @@
         The interval over which to aggregate metrics, in ##h##m format.
   - name: --filter
     short-summary: A string used to reduce the set of metric data returned. eg. "LUN eq '*'"
-    long-summary: 'For a full list of filters, see the filter string reference at https://docs.microsoft.com/rest/api/monitor/metrics/list'
+    long-summary: 'For a full list of filters, see the filter string reference at https://learn.microsoft.com/rest/api/monitor/metrics/list'
   - name: --metadata
     short-summary: Return the metadata values instead of metric data
   - name: --dimension
diff --git a/src/azure-cli/azure/cli/command_modules/vm/_params.py b/src/azure-cli/azure/cli/command_modules/vm/_params.py
index 350d87e00e2..662d2e58e27 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/_params.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/_params.py
@@ -295,7 +295,7 @@ def load_arguments(self, _):
         ib_cutput_type = CLIArgumentType(arg_group="Output")
 
         c.argument('build_timeout', type=int, help="The Maximum duration to wait while building the image template, in minutes. Default is 60.")
-        c.argument('image_template', help='Local path or URL to an image template file. When using --image-template, all other parameters are ignored except -g and -n. Reference: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-json')
+        c.argument('image_template', help='Local path or URL to an image template file. When using --image-template, all other parameters are ignored except -g and -n. Reference: https://learn.microsoft.com/azure/virtual-machines/linux/image-builder-json')
         c.argument('identity', nargs='+', help='List of user assigned identities (name or ID, space delimited) of the image template.')
         c.argument('staging_resource_group', min_api='2022-02-14', help='The staging resource group id in the same subscription as the image template that will be used to build the image.')
 
@@ -737,7 +737,7 @@ def load_arguments(self, _):
         c.argument('name', name_arg_type)
         c.argument('nat_backend_port', default=None, help='Backend port to open with NAT rules. Defaults to 22 on Linux and 3389 on Windows.')
         c.argument('single_placement_group', arg_type=get_three_state_flag(), help="Limit the scale set to a single placement group."
-                   " See https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-placement-groups for details.")
+                   " See https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-placement-groups for details.")
         c.argument('platform_fault_domain_count', type=int, help='Fault Domain count for each placement group in the availability zone', min_api='2017-12-01')
         c.argument('vmss_name', name_arg_type, id_part=None, help='Name of the virtual machine scale set.')
         c.argument('instance_count', help='Number of VMs in the scale set.', type=int)
@@ -782,7 +782,7 @@ def load_arguments(self, _):
         c.argument('security_posture_reference_exclude_extensions', min_api='2023-03-01', type=validate_file_or_dict,
                    options_list=['--security-posture-reference-exclude-extensions', '--exclude-extensions'],
                    help='List of virtual machine extensions to exclude when applying the Security Posture. Either a Json string or a file path is acceptable. '
-                        'Please refer to https://docs.microsoft.com/rest/api/compute/virtualmachinescalesets/get#virtualmachineextension for the data format.')
+                        'Please refer to https://learn.microsoft.com/rest/api/compute/virtualmachinescalesets/get#virtualmachineextension for the data format.')
         c.argument('skuprofile_vmsizes', nargs='+', min_api='2024-07-01', help='A list of VM sizes in the scale set. See https://azure.microsoft.com/pricing/details/virtual-machines/ for size info.')
         c.argument('skuprofile_allostrat', options_list=['--skuprofile-allocation-strategy', '--sku-allocat-strat'], arg_type=get_enum_type(['LowestPrice', 'CapacityOptimized']), min_api='2024-07-01', help='Allocation strategy for vm sizes in SKU profile.')
 
@@ -836,7 +836,7 @@ def load_arguments(self, _):
         c.argument('security_posture_reference_exclude_extensions', min_api='2023-03-01', type=validate_file_or_dict,
                    options_list=['--security-posture-reference-exclude-extensions', '--exclude-extensions'],
                    help='List of virtual machine extensions to exclude when applying the Security Posture. Either a Json string or a file path is acceptable. '
-                        'Please refer to https://docs.microsoft.com/rest/api/compute/virtualmachinescalesets/get#virtualmachineextension for the data format.')
+                        'Please refer to https://learn.microsoft.com/rest/api/compute/virtualmachinescalesets/get#virtualmachineextension for the data format.')
         c.argument('ephemeral_os_disk', arg_type=get_three_state_flag(), min_api='2024-03-01', help='Allow you to specify the ephemeral disk settings for the operating system disk. Specify it to false to set ephemeral disk setting as empty and migrate it to non ephemeral')
         c.argument('ephemeral_os_disk_option', options_list=['--ephemeral-os-disk-option', '--ephemeral-option'], arg_type=get_enum_type(self.get_models('DiffDiskOptions')), min_api='2024-03-01', help='Specify the ephemeral disk settings for operating system disk.')
         c.argument('zones', zones_type, min_api='2023-03-01')
@@ -1084,7 +1084,7 @@ def load_arguments(self, _):
         with self.argument_context(scope, arg_group='Authentication') as c:
             c.argument('generate_ssh_keys', action='store_true', help='Generate SSH public and private key files if missing. The keys will be stored in the ~/.ssh directory')
             c.argument('ssh_key_type', arg_type=get_enum_type(['RSA', 'Ed25519']), default='RSA', min_api='2023-09-01', help='Specify the type of SSH public and private key files to be generated if missing.')
-            c.argument('admin_username', help='Username for the VM. Default value is current username of OS. If the default value is system reserved, then default value will be set to azureuser. Please refer to https://docs.microsoft.com/rest/api/compute/virtualmachines/createorupdate#osprofile to get a full list of reserved values.')
+            c.argument('admin_username', help='Username for the VM. Default value is current username of OS. If the default value is system reserved, then default value will be set to azureuser. Please refer to https://learn.microsoft.com/rest/api/compute/virtualmachines/createorupdate#osprofile to get a full list of reserved values.')
             c.argument('admin_password', help="Password for the VM if authentication type is 'Password'.")
             c.argument('ssh_key_value', options_list=['--ssh-key-values'], completer=FilesCompleter(), type=file_type, nargs='+')
             c.argument('ssh_dest_key_path', help='Destination file path on the VM for the SSH key. If the file already exists, the specified key(s) are appended to the file. Destination path for SSH public keys is currently limited to its default value "/home/username/.ssh/authorized_keys" due to a known issue in Linux provisioning agent.')
@@ -1638,7 +1638,7 @@ def load_arguments(self, _):
 
     with self.argument_context('capacity reservation create') as c:
         c.argument('zone', zone_type, help='Availability Zone to use for this capacity reservation. The zone has to be single value and also should be part for the list of zones specified during the capacity reservation group creation. If not provided, the reservation supports only non-zonal deployments. If provided, enforces VM/VMSS using this capacity reservation to be in same zone.')
-        c.argument('sku_name', options_list=['--sku', '-s'], required=True, help='The SKU of the resource for which capacity needs be reserved. Currently VM Skus with the capability called "CapacityReservationSupported" set to true are supported. Refer to List Microsoft.Compute SKUs in a region (https://docs.microsoft.com/rest/api/compute/resourceskus/list) for supported values.')
+        c.argument('sku_name', options_list=['--sku', '-s'], required=True, help='The SKU of the resource for which capacity needs be reserved. Currently VM Skus with the capability called "CapacityReservationSupported" set to true are supported. Refer to List Microsoft.Compute SKUs in a region (https://learn.microsoft.com/rest/api/compute/resourceskus/list) for supported values.')
 
     with self.argument_context('capacity reservation show') as c:
         c.argument('instance_view', action='store_true', options_list=['--instance-view', '-i'], help='Retrieve a snapshot of the runtime properties of the capacity reservation that is managed by the platform and can change outside of control plane operations.')
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/disk/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/disk/__cmd_group.py
index a3d98c8be7c..ef273230237 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/disk/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/disk/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage Azure Managed Disks.
 
     Azure Virtual Machines use disks as a place to store an operating system, applications, and data. All Azure virtual machines have at least two disks: An operating system disk, and a temporary disk. The operating system disk is created from an image, and both the operating system disk and the image are actually virtual hard disks (VHDs) stored in an Azure storage account. Virtual machines also can have one or more data disks, that are also stored as VHDs.
-    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview)
+    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview)
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/nsg/__cmd_group.py
index 79bec603989..22ad607bc90 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/nsg/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/public_ip/__cmd_group.py
index 569e6343494..2557faf7887 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/public_ip/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_deallocate.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_deallocate.py
index 4080a9d57c9..65a493ad542 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_deallocate.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_deallocate.py
@@ -17,7 +17,7 @@
 class Deallocate(AAZCommand):
     """Deallocate a VM so that computing resources are no longer allocated (charges no longer apply). The status will change from 'Stopped' to 'Stopped (Deallocated)'.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_generalize.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_generalize.py
index 2ffcb223c62..476f017d637 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_generalize.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/_generalize.py
@@ -17,7 +17,7 @@
 class Generalize(AAZCommand):
     """Mark a VM as generalized, allowing it to be imaged for multiple deployments.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_redeploy.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_redeploy.py
index b8c414dbd21..0948740c22b 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_redeploy.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_redeploy.py
@@ -17,7 +17,7 @@
 class Redeploy(AAZCommand):
     """Redeploy the dedicated host.
 
-    The operation will complete successfully once the dedicated host has migrated to a new node and is running. To determine the health of VMs deployed on the dedicated host after the redeploy check the Resource Health Center in the Azure Portal. Please refer to https://docs.microsoft.com/azure/service-health/resource-health-overview for more details.
+    The operation will complete successfully once the dedicated host has migrated to a new node and is running. To determine the health of VMs deployed on the dedicated host after the redeploy check the Resource Health Center in the Azure Portal. Please refer to https://learn.microsoft.com/azure/service-health/resource-health-overview for more details.
     """
 
     _aaz_info = {
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_restart.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_restart.py
index 578f646fdd0..928a0e3e85d 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_restart.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vm/host/_restart.py
@@ -17,7 +17,7 @@
 class Restart(AAZCommand):
     """Restart the dedicated host.
 
-    The operation will complete successfully once the dedicated host has restarted and is running. To determine the health of VMs deployed on the dedicated host after the restart check the Resource Health Center in the Azure Portal. Please refer to https://docs.microsoft.com/azure/service-health/resource-health-overview for more details.
+    The operation will complete successfully once the dedicated host has restarted and is running. To determine the health of VMs deployed on the dedicated host after the restart check the Resource Health Center in the Azure Portal. Please refer to https://learn.microsoft.com/azure/service-health/resource-health-overview for more details.
     """
 
     _aaz_info = {
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vmss/_perform_maintenance.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vmss/_perform_maintenance.py
index 2fee8669570..d42372b0cc7 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vmss/_perform_maintenance.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/latest/vmss/_perform_maintenance.py
@@ -15,7 +15,7 @@
     "vmss perform-maintenance",
 )
 class PerformMaintenance(AAZCommand):
-    """Perform maintenance on one or more virtual machines in a VM scale set. Operation on instances which are not eligible for perform maintenance will be failed. Please refer to best practices for more details: https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
+    """Perform maintenance on one or more virtual machines in a VM scale set. Operation on instances which are not eligible for perform maintenance will be failed. Please refer to best practices for more details: https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
     """
 
     _aaz_info = {
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/disk/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/disk/__cmd_group.py
index a3d98c8be7c..ef273230237 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/disk/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/disk/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage Azure Managed Disks.
 
     Azure Virtual Machines use disks as a place to store an operating system, applications, and data. All Azure virtual machines have at least two disks: An operating system disk, and a temporary disk. The operating system disk is created from an image, and both the operating system disk and the image are actually virtual hard disks (VHDs) stored in an Azure storage account. Virtual machines also can have one or more data disks, that are also stored as VHDs.
-    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview)
+    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview)
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py
index 79bec603989..22ad607bc90 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/nsg/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py
index 569e6343494..2557faf7887 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/public_ip/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_deallocate.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_deallocate.py
index ef98bd790f9..e1dba58437b 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_deallocate.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_deallocate.py
@@ -17,7 +17,7 @@
 class Deallocate(AAZCommand):
     """Deallocate a VM so that computing resources are no longer allocated (charges no longer apply). The status will change from 'Stopped' to 'Stopped (Deallocated)'.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_generalize.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_generalize.py
index 005071e2154..e48267149cb 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_generalize.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2018_03_01_hybrid/vm/_generalize.py
@@ -17,7 +17,7 @@
 class Generalize(AAZCommand):
     """Mark a VM as generalized, allowing it to be imaged for multiple deployments.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/disk/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/disk/__cmd_group.py
index a3d98c8be7c..ef273230237 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/disk/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/disk/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage Azure Managed Disks.
 
     Azure Virtual Machines use disks as a place to store an operating system, applications, and data. All Azure virtual machines have at least two disks: An operating system disk, and a temporary disk. The operating system disk is created from an image, and both the operating system disk and the image are actually virtual hard disks (VHDs) stored in an Azure storage account. Virtual machines also can have one or more data disks, that are also stored as VHDs.
-    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview)
+    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview)
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/nsg/__cmd_group.py
index 79bec603989..22ad607bc90 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/nsg/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/public_ip/__cmd_group.py
index 569e6343494..2557faf7887 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/public_ip/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_deallocate.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_deallocate.py
index f7c0f21ad75..e5ca699cedf 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_deallocate.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_deallocate.py
@@ -17,7 +17,7 @@
 class Deallocate(AAZCommand):
     """Deallocate a VM so that computing resources are no longer allocated (charges no longer apply). The status will change from 'Stopped' to 'Stopped (Deallocated)'.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_generalize.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_generalize.py
index 373d9c27cf7..2098c9f786f 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_generalize.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vm/_generalize.py
@@ -17,7 +17,7 @@
 class Generalize(AAZCommand):
     """Mark a VM as generalized, allowing it to be imaged for multiple deployments.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vmss/_perform_maintenance.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vmss/_perform_maintenance.py
index 6d91ea5934d..bfb1118bd1d 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vmss/_perform_maintenance.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2019_03_01_hybrid/vmss/_perform_maintenance.py
@@ -15,7 +15,7 @@
     "vmss perform-maintenance",
 )
 class PerformMaintenance(AAZCommand):
-    """Perform maintenance on one or more virtual machines in a VM scale set. Operation on instances which are not eligible for perform maintenance will be failed. Please refer to best practices for more details: https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
+    """Perform maintenance on one or more virtual machines in a VM scale set. Operation on instances which are not eligible for perform maintenance will be failed. Please refer to best practices for more details: https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
     """
 
     _aaz_info = {
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/disk/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/disk/__cmd_group.py
index a3d98c8be7c..ef273230237 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/disk/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/disk/__cmd_group.py
@@ -18,7 +18,7 @@ class __CMDGroup(AAZCommandGroup):
     """Manage Azure Managed Disks.
 
     Azure Virtual Machines use disks as a place to store an operating system, applications, and data. All Azure virtual machines have at least two disks: An operating system disk, and a temporary disk. The operating system disk is created from an image, and both the operating system disk and the image are actually virtual hard disks (VHDs) stored in an Azure storage account. Virtual machines also can have one or more data disks, that are also stored as VHDs.
-    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview)
+    Azure Unmanaged Data Disks have a maximum size of 4095 GB. To use disks larger than 4095 GB use [Azure Managed Disks](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview)
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
index 79bec603989..22ad607bc90 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/nsg/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage Azure Network Security Groups (NSGs).
 
-    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://docs.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
+    You can control network traffic to resources in a virtual network using a network security group. A network security group contains a list of security rules that allow or deny inbound or outbound network traffic based on source or destination IP addresses, Application Security Groups, ports, and protocols. For more information visit https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-nsg-arm-cli.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py
index 569e6343494..2557faf7887 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/public_ip/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage public IP addresses.
 
-    To learn more about public IP addresses visit https://docs.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
+    To learn more about public IP addresses visit https://learn.microsoft.com/azure/virtual-network/virtual-network-public-ip-address.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
index 4099513f8aa..73d2004eb91 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Check if a private IP address is available for use within a virtual network.
 
-    To learn more about Virtual Networks visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-network.
+    To learn more about Virtual Networks visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-network.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
index 33a5960d8ee..748734c3253 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/network/vnet/subnet/__cmd_group.py
@@ -14,7 +14,7 @@
 class __CMDGroup(AAZCommandGroup):
     """Manage subnets in an Azure Virtual Network.
 
-    To learn more about subnets visit https://docs.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
+    To learn more about subnets visit https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet.
     """
     pass
 
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_deallocate.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_deallocate.py
index 26f786f576d..ea0687d27d8 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_deallocate.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_deallocate.py
@@ -17,7 +17,7 @@
 class Deallocate(AAZCommand):
     """Deallocate a VM so that computing resources are no longer allocated (charges no longer apply). The status will change from 'Stopped' to 'Stopped (Deallocated)'.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_generalize.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_generalize.py
index 5cb0c74d486..7ea7e2465bf 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_generalize.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vm/_generalize.py
@@ -17,7 +17,7 @@
 class Generalize(AAZCommand):
     """Mark a VM as generalized, allowing it to be imaged for multiple deployments.
 
-    For an end-to-end tutorial, see https://docs.microsoft.com/azure/virtual-machines/linux/capture-image
+    For an end-to-end tutorial, see https://learn.microsoft.com/azure/virtual-machines/linux/capture-image
 
     :example: Deallocate, generalize, and capture a stopped virtual machine.
         az vm deallocate -g MyResourceGroup -n MyVm
diff --git a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vmss/_perform_maintenance.py b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vmss/_perform_maintenance.py
index 8df98063235..cf60481825d 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vmss/_perform_maintenance.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/aaz/profile_2020_09_01_hybrid/vmss/_perform_maintenance.py
@@ -15,7 +15,7 @@
     "vmss perform-maintenance",
 )
 class PerformMaintenance(AAZCommand):
-    """Perform maintenance on one or more virtual machines in a VM scale set. Operation on instances which are not eligible for perform maintenance will be failed. Please refer to best practices for more details: https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
+    """Perform maintenance on one or more virtual machines in a VM scale set. Operation on instances which are not eligible for perform maintenance will be failed. Please refer to best practices for more details: https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
     """
 
     _aaz_info = {
diff --git a/src/azure-cli/azure/cli/command_modules/vm/custom.py b/src/azure-cli/azure/cli/command_modules/vm/custom.py
index e9b79d27c1c..65cb4e96394 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/custom.py
+++ b/src/azure-cli/azure/cli/command_modules/vm/custom.py
@@ -3339,7 +3339,7 @@ def _get_public_ip_address_allocation(value, sku):
             lb_resource['dependsOn'] = lb_dependencies
             master_template.add_resource(lb_resource)
 
-            # Per https://docs.microsoft.com/azure/load-balancer/load-balancer-standard-overview#nsg
+            # Per https://learn.microsoft.com/azure/load-balancer/load-balancer-standard-overview#nsg
             if load_balancer_sku and load_balancer_sku.lower() == 'standard' and nsg is None and os_type:
                 nsg_name = '{}NSG'.format(vmss_name)
                 master_template.add_resource(build_nsg_resource(
diff --git a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2018_03_01/recordings/test_vmss_create_default_app_gateway.yaml b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2018_03_01/recordings/test_vmss_create_default_app_gateway.yaml
index da4a0082939..bc3417c43fe 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2018_03_01/recordings/test_vmss_create_default_app_gateway.yaml
+++ b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2018_03_01/recordings/test_vmss_create_default_app_gateway.yaml
@@ -391,7 +391,7 @@ interactions:
         westus, Current Limit: 100, Current Usage: 9, Additional Required: 101, (Minimum)
         New Limit Required: 110. Submit a request for Quota increase at https://aka.ms/ProdportalCRP/#blade/Microsoft_Azure_Capacity/UsageAndQuota.ReactView/Parameters/%7B%22subscriptionId%22:%220b1f6471-1bf0-4dda-aec3-cb9272f09590%22,%22command%22:%22openQuotaApprovalBlade%22,%22quotas%22:[%7B%22location%22:%22westus%22,%22providerId%22:%22Microsoft.Compute%22,%22resourceName%22:%22cores%22,%22quotaRequest%22:%7B%22properties%22:%7B%22limit%22:110,%22unit%22:%22Count%22,%22name%22:%7B%22value%22:%22cores%22%7D%7D%7D%7D]%7D
         by specifying parameters listed in the \u2018Details\u2019 section for deployment
-        to succeed. Please read more about quota limits at https://docs.microsoft.com/en-us/azure/azure-supportability/regional-quota-requests\"}]}}"
+        to succeed. Please read more about quota limits at https://learn.microsoft.com/en-us/azure/azure-supportability/regional-quota-requests\"}]}}"
     headers:
       cache-control:
       - no-cache
diff --git a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2019_03_01/recordings/test_vmss_create_default_app_gateway.yaml b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2019_03_01/recordings/test_vmss_create_default_app_gateway.yaml
index 7ddb70527f9..897d2bdd6b7 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2019_03_01/recordings/test_vmss_create_default_app_gateway.yaml
+++ b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2019_03_01/recordings/test_vmss_create_default_app_gateway.yaml
@@ -391,7 +391,7 @@ interactions:
         westus, Current Limit: 100, Current Usage: 11, Additional Required: 101, (Minimum)
         New Limit Required: 112. Submit a request for Quota increase at https://aka.ms/ProdportalCRP/#blade/Microsoft_Azure_Capacity/UsageAndQuota.ReactView/Parameters/%7B%22subscriptionId%22:%220b1f6471-1bf0-4dda-aec3-cb9272f09590%22,%22command%22:%22openQuotaApprovalBlade%22,%22quotas%22:[%7B%22location%22:%22westus%22,%22providerId%22:%22Microsoft.Compute%22,%22resourceName%22:%22cores%22,%22quotaRequest%22:%7B%22properties%22:%7B%22limit%22:112,%22unit%22:%22Count%22,%22name%22:%7B%22value%22:%22cores%22%7D%7D%7D%7D]%7D
         by specifying parameters listed in the \u2018Details\u2019 section for deployment
-        to succeed. Please read more about quota limits at https://docs.microsoft.com/en-us/azure/azure-supportability/regional-quota-requests\"}]}}"
+        to succeed. Please read more about quota limits at https://learn.microsoft.com/en-us/azure/azure-supportability/regional-quota-requests\"}]}}"
     headers:
       cache-control:
       - no-cache
diff --git a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vm_create_custom_ip.yaml b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vm_create_custom_ip.yaml
index 9607b9ee019..605e3210a2a 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vm_create_custom_ip.yaml
+++ b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vm_create_custom_ip.yaml
@@ -257,7 +257,7 @@ interactions:
         See inner errors for details.","details":[{"code":"InvalidParameter","target":"imageReference","message":"The
         following list of images referenced from the deployment template are not found:
         Publisher: SUSE, Offer: openSUSE-Leap, Sku: 42.3, Version: latest. Please
-        refer to https://docs.microsoft.com/en-us/azure/virtual-machines/windows/cli-ps-findimage
+        refer to https://learn.microsoft.com/en-us/azure/virtual-machines/windows/cli-ps-findimage
         for instructions on finding available images."}]}}'
     headers:
       cache-control:
diff --git a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vmss_create_default_app_gateway.yaml b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vmss_create_default_app_gateway.yaml
index 73449a57551..772dcca3440 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vmss_create_default_app_gateway.yaml
+++ b/src/azure-cli/azure/cli/command_modules/vm/tests/hybrid_2020_09_01/recordings/test_vmss_create_default_app_gateway.yaml
@@ -276,7 +276,7 @@ interactions:
         westus, Current Limit: 100, Current Usage: 10, Additional Required: 101, (Minimum)
         New Limit Required: 111. Submit a request for Quota increase at https://aka.ms/ProdportalCRP/?#create/Microsoft.Support/Parameters/%7B%22subId%22:%22d34bd6cc-8d7e-451b-ace3-cd05c69f82d0%22,%22pesId%22:%2206bfd9d3-516b-d5c6-5802-169c800dec89%22,%22supportTopicId%22:%22e12e3d1d-7fa0-af33-c6d0-3c50df9658a3%22%7D
         by specifying parameters listed in the \u2018Details\u2019 section for deployment
-        to succeed. Please read more about quota limits at https://docs.microsoft.com/en-us/azure/azure-supportability/regional-quota-requests.\"}]}}"
+        to succeed. Please read more about quota limits at https://learn.microsoft.com/en-us/azure/azure-supportability/regional-quota-requests.\"}]}}"
     headers:
       cache-control:
       - no-cache
diff --git a/src/azure-cli/azure/cli/command_modules/vm/tests/latest/recordings/test_disk_and_snapshot_with_elastic_san.yaml b/src/azure-cli/azure/cli/command_modules/vm/tests/latest/recordings/test_disk_and_snapshot_with_elastic_san.yaml
index d7816c6dbeb..adcfc45153f 100644
--- a/src/azure-cli/azure/cli/command_modules/vm/tests/latest/recordings/test_disk_and_snapshot_with_elastic_san.yaml
+++ b/src/azure-cli/azure/cli/command_modules/vm/tests/latest/recordings/test_disk_and_snapshot_with_elastic_san.yaml
@@ -8627,7 +8627,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8660,7 +8660,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8693,7 +8693,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8726,7 +8726,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8759,7 +8759,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8792,7 +8792,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8825,7 +8825,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8857,7 +8857,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8889,7 +8889,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8921,7 +8921,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8953,7 +8953,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -8985,7 +8985,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9017,7 +9017,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9049,7 +9049,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9081,7 +9081,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9113,7 +9113,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9145,7 +9145,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9177,7 +9177,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9209,7 +9209,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9241,7 +9241,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9273,7 +9273,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9305,7 +9305,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9337,7 +9337,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9369,7 +9369,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9401,7 +9401,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9433,7 +9433,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9465,7 +9465,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9497,7 +9497,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9529,7 +9529,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9562,7 +9562,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9595,7 +9595,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9628,7 +9628,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9661,7 +9661,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9694,7 +9694,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9727,7 +9727,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9760,7 +9760,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9793,7 +9793,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9826,7 +9826,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/azure/azure-arc/data/\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/azure/azure-arc/data/\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9858,7 +9858,7 @@ interactions:
         \"author\"\n                                }\n                            ],\n
         \                           \"document_names\": {\n                                \"description\":
         \"DESCRIPTION.rst\"\n                            },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -9890,7 +9890,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview?view=sql-server-ver15\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
@@ -10616,7 +10616,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
+        \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"Proprietary https://aka.ms/azureml-preview-sdk-license
@@ -10655,7 +10655,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
+        \"https://learn.microsoft.com/python/api/overview/azure/ml/?view=azure-ml-py\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"Proprietary https://aka.ms/azureml-preview-sdk-license
@@ -10694,7 +10694,7 @@ interactions:
         {\n                                \"description\": \"DESCRIPTION.rst\",\n
         \                               \"license\": \"LICENSE.txt\"\n                            },\n
         \                           \"project_urls\": {\n                                \"Home\":
-        \"https://docs.microsoft.com/azure/machine-learning/service/\"\n                            }\n
+        \"https://learn.microsoft.com/azure/machine-learning/service/\"\n                            }\n
         \                       }\n                    },\n                    \"extras\":
         [],\n                    \"generator\": \"bdist_wheel (0.30.0)\",\n                    \"license\":
         \"Proprietary https://aka.ms/azureml-preview-sdk-license \",\n                    \"metadata_version\":
@@ -13206,7 +13206,7 @@ interactions:
         \                       ],\n                        \"document_names\": {\n
         \                         \"description\": \"DESCRIPTION.rst\"\n                        },\n
         \                       \"project_urls\": {\n                          \"Home\":
-        \"https://docs.microsoft.com/azure-sphere\"\n                        }\n                      }\n
+        \"https://learn.microsoft.com/azure-sphere\"\n                        }\n                      }\n
         \                   },\n                    \"extras\": [],\n                    \"generator\":
         \"bdist_wheel (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"license_file\":
         \"LICENSE\",\n                    \"metadata_version\": \"2.0\",\n                    \"name\":
@@ -13241,7 +13241,7 @@ interactions:
         \                           ],\n                            \"document_names\":
         {\n                                \"description\": \"DESCRIPTION.rst\"\n
         \                           },\n                            \"project_urls\":
-        {\n                                \"Home\": \"https://docs.microsoft.com/azure-sphere\"\n
+        {\n                                \"Home\": \"https://learn.microsoft.com/azure-sphere\"\n
         \                           }\n                        }\n                    },\n
         \                   \"extras\": [],\n                    \"generator\": \"bdist_wheel
         (0.30.0)\",\n                    \"license\": \"MIT\",\n                    \"metadata_version\":
diff --git a/src/azure-cli/service_name.json b/src/azure-cli/service_name.json
index a063416ed4a..0e87fcddcbc 100644
--- a/src/azure-cli/service_name.json
+++ b/src/azure-cli/service_name.json
@@ -332,7 +332,7 @@
   {
     "Command": "az managed-cassandra",
     "AzureServiceName": "Database for Cosmos DB",
-    "URL": "https://docs.microsoft.com/azure/cosmos-db/"
+    "URL": "https://learn.microsoft.com/azure/cosmos-db/"
   },
   {
     "Command": "az managedapp",
@@ -407,7 +407,7 @@
   {
     "Command": "az private-link",
     "AzureServiceName": "Resource Manager",
-    "URL": "https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/create-private-link-access-portal"
+    "URL": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/create-private-link-access-portal"
   },
   {
     "Command": "az redis",
@@ -437,7 +437,7 @@
   {
     "Command": "az resourcemanagement",
     "AzureServiceName": "Resource Manager",
-    "URL": "https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/create-private-link-access-portal"
+    "URL": "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/create-private-link-access-portal"
   },
   {
     "Command": "az rest",
@@ -447,7 +447,7 @@
   {
     "Command": "az restore-point",
     "AzureServiceName": "Virtual Machines",
-    "URL": "https://docs.microsoft.com/rest/api/compute/restore-points"
+    "URL": "https://learn.microsoft.com/rest/api/compute/restore-points"
   },
   {
     "Command": "az role",